This explanation makes sense but it overlook other less obvious issues. When an app is compromise, it inherits its permissions (all its access), and zoom app has many time been shown to be poorly protected. Having the microphone on at all time is also harmful as you won't be able to know if someone is actively listening anymore, you'll always suspect "that's probably the zoom app". Having a company lower your defenses to improve their software is bad practice.