Zoom also used to allow any website to record you through your webcam because of their clever trick with installing a local web server to skip around the browser dialog for audio / video permissions.

That local server was also open for remote code execution and kept running after uninstalling Zoom. Yummy.

If you absolutely must use Zoom then under no circumstances install the client. Zoom works from the browser although they employ a dark pattern to trick you into installing their client. There's a browser extension to work around that though.