2 more files I can think of:
thumbs.db
.DS_STORE
(I will have to look for the right capitals)
@artwork.
I did had an epub where I removed the artwork causing me to loose my cover (I did remove it manually, did not check the manifest file or other files, so you're right, everybody could do dumb-ass thinks with epub
)