It seems a little much to recommend Jitsi as 'better', when nobody is really sure of that.
* Traditional Web Servers (Apache 2 or nginx)
* https/ssl
* modern web browsers
Running a videoconference software that just works in your browser over https solves a large majority of security concerns. The video and voice is encrypted over SSL between the clients and the server. It's not end to end encrypted because that's not really possible, but the only place its unencrypted is in your browser and on the server you own and control. If you don't trust Jitsi's ability to password protect rooms, you could put normal http password authentication in front of your jitsi install -- which would break the mobile app but work just fine in your browser.
Lots of the concerns of Zoom's security are resolved by using readily available standards and software instead of depending on proprietary black box solutions that turn out to send encryption keys through china.
EDIT: As kardos notes below the video actually runs over udp on port 10000 so it is not encrypted over https. It looks like video is encrypted[1] but I'm unclear what method it's encrypted.
1. See Security section of Readme https://github.com/jitsi/jitsi-meet
That's really a weak argument: bad is not better than unknown. And in this case unknown is not unknown.
Jisti is OSS, has been reviewed as such, and has been around since way before zoom was even invented.