I agree it's more akin to malware, but without knowing the implementation details of how the removal was actually done, to me it just feels like a bandaid monkeypatch. For example, it seems like the removal of the Zoom local server was hardcoded into the first silent patch. How can Apple tell between the Zoom local server and a local server I am using for development? I just get the feeling that if any other vendor was silently disrupting applications I (knowingly) installed, there would be outrage