There are reports there was another RCE that Zoom didn’t/wouldn’t fix. This is what Gatekeeper and the built-in anti-malware engine is suppose to do — remove malware. If you don’t want this feature, you can turn it off, but this is a sane default and a good thing.

Apple didn’t flex anything here, it removed malware from its users computers.

https://twitter.com/riskybusiness/status/1148824808236318721