It is easy to say "we are better now, we promise". They straight up lied about security features like e2e for years, and leadership is still mostly the same. Th

It is easy to say "we are better now, we promise". They straight up lied about security features like e2e for years, and leadership is still mostly the same. They only started seriously hiring in security because they got caught over and over and over. I have worked with companies with some of the best security people in the world who had no cooperation from engineering to roll out basic risk reductions like code review because it might mean slowing down velocity a bit. To be blunt, security people as often hired with big pairs of golden handcuffs in order to make security marketing more believable, regardless of the reality. The only way to win back trust of the security minded at this point, is to do what strong competitors like BigBlueButton and Jitsi did: Open source, and invite anyone from the public to audit code and compile binaries as they like. There is virtually 0 chance they ever do this, but if they did, I would gladly audit it for free out of public interest, and have no problem doing a 180 and actively recommending zoom if it becomes easy to verify it is as good or better than the competition at security and privacy. For now I maintain my position of strongly urging all my clients to abandon Zoom in favor of historically honest and highly accountable alternatives that work just as well as Zoom without constantly pestering users to grant Zoom with blind sweeping remote code execution privileges on their systems.