Jitsi Meet runs on your own server and lets you videoconference using just your browser and its built in support for WebRTC. That means it gets to leverage the readily available and easily understood security of:

* Traditional Web Servers (Apache 2 or nginx)

* https/ssl

* modern web browsers

Running a videoconference software that just works in your browser over https solves a large majority of security concerns. The video and voice is encrypted over SSL between the clients and the server. It's not end to end encrypted because that's not really possible, but the only place its unencrypted is in your browser and on the server you own and control. If you don't trust Jitsi's ability to password protect rooms, you could put normal http password authentication in front of your jitsi install -- which would break the mobile app but work just fine in your browser.

Lots of the concerns of Zoom's security are resolved by using readily available standards and software instead of depending on proprietary black box solutions that turn out to send encryption keys through china.

EDIT: As kardos notes below the video actually runs over udp on port 10000 so it is not encrypted over https. It looks like video is encrypted[1] but I'm unclear what method it's encrypted.

1. See Security section of Readme https://github.com/jitsi/jitsi-meet