Some users might have use cases where they want only to decrypt a tarball without extracting it.

IMO it could be a crypto preferences option. I don't think we should change the default because the default usecase is to decrypt and untar.