It's something I've wanted to write for a long time, and that tweet finally spurred me to do it. Hadn't seen the HN thread though!
Beyond the privacy concerns it's a security risk. Their desktop client had a remote code execution vulnerability last year:
https://www.zdnet.com/article/researcher-says-zoom-web-serve...