doc: add Windows archive install permissions note (#9312)

Author: mcollina

apps/site/pages/en/download/alpha.mdx

@@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel
 
 Learn how to <LinkWithArrow href="https://github.com/nodejs/node#verifying-binaries">verify</LinkWithArrow> signed SHASUMS.
 
+On Windows, use the Windows Installer (`.msi`) for system-wide installations
+when possible. If you use a `.zip` or `.7z` archive for a system-wide
+installation, extract Node.js to a directory that is not writable by untrusted
+users. Avoid leaving the installation directory with permissions that allow
+other authenticated users to create or modify files in that directory.
+
 Looking for Node.js source? Download a signed <Release.DownloadLink kind="source">Node.js source</Release.DownloadLink> tarball.
 
 Check out our <LinkWithArrow href="https://nodejs.org/download/nightly/">nightly</LinkWithArrow> binaries or

apps/site/pages/en/download/current.mdx

@@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel
 
 Learn how to <LinkWithArrow href="https://github.com/nodejs/node#verifying-binaries">verify</LinkWithArrow> signed SHASUMS.
 
+On Windows, use the Windows Installer (`.msi`) for system-wide installations
+when possible. If you use a `.zip` or `.7z` archive for a system-wide
+installation, extract Node.js to a directory that is not writable by untrusted
+users. Avoid leaving the installation directory with permissions that allow
+other authenticated users to create or modify files in that directory.
+
 Looking for Node.js source? Download a signed <Release.DownloadLink kind="source">Node.js source</Release.DownloadLink> tarball.
 
 Check out our <LinkWithArrow href="https://nodejs.org/download/nightly/">nightly</LinkWithArrow> binaries or

apps/site/pages/en/download/index.mdx

@@ -27,6 +27,12 @@ Learn more about [Node.js releases](/about/previous-releases), including the rel
 
 Learn how to <LinkWithArrow href="https://github.com/nodejs/node#verifying-binaries">verify</LinkWithArrow> signed SHASUMS.
 
+On Windows, use the Windows Installer (`.msi`) for system-wide installations
+when possible. If you use a `.zip` or `.7z` archive for a system-wide
+installation, extract Node.js to a directory that is not writable by untrusted
+users. Avoid leaving the installation directory with permissions that allow
+other authenticated users to create or modify files in that directory.
+
 Looking for Node.js source? Download a signed <Release.DownloadLink kind="source">Node.js source</Release.DownloadLink> tarball.
 
 Check out our <LinkWithArrow href="https://nodejs.org/download/nightly/">nightly</LinkWithArrow> binaries or