Calling it a disaster.. I find the security community a bit tough against Zoom.

They traded a bit of security in favor of useability? Fair enough. They failed to recognise AES-EDC can be attacked by very motivated cryptanalysts? Alright.

They gathered a little bit more data than they claim they did? Well, who is not doing that?

I think they proved they can be agile. They fixed a bunch of sec issues in few days, while growing their user base like 30x, in a shutdown period! How many companies would be able to do that?

I am sure they will work in fixing all of those quickly. E2EE will take a bit of time. Right. In the meantime, Zoom is working pretty darn well for talking with 10+ family and friends while everybody is contained. Do we need E2EE for that? probably not, but that is my choice.