If Zoom was done well it would be a confined app, and controlling the Zoom process wouldn't give you access to everything the user has access too, let alone allow easy root privesc. It's just rubbish software.

(WebEx is as bad if not worse.)