Glenn Fleishman, writing for TidBITS:
Let me put it bluntly: Zoom is sloppy. Evidence of this began to accumulate last year with a screw-up discovered in mid-2019 that exposed macOS users to significant privacy exposure: your video camera could have been activated by visiting a page that loaded a malicious link. The problematic disclosures have accelerated since January 2020 with a series of errors in judgment and programming flaws. Zoom may have a top-notch technical solution and user experience, but the company deserves to take its knocks for sloppy and negligent programming.
Zoom is a damn train wreck. The only thing right they did was build a solid platform that's easy to use. Hundreds of millions of users flocked to the service because of that ease of use, exposing the privacy and security of even more users, and making Zoom a pretty penny in the process.