My bet is that Zoom understand the GDPR just fine, and don't care. They have repeatedly shown that they will do whatever they want, and then act contrite later

My bet is that Zoom understand the GDPR just fine, and don't care. They have repeatedly shown that they will do whatever they want, and then act contrite later if they're caught out. They are not trustworthy, and I won't run their software on any nonsandboxed environment AT ALL. There's utterly no reason to.