Given the ease of setup of Zoom which defaulted to a machine-guessable URL which displayed email and other information about participants, this is one reason Zoom is rightly being scrutinized and criticized for poor security.
Was there any rational for them doing this?
Now every private room is by default secured with a password, I think.
Conference ids are numbers for easier dial-in?
They better get on those security concerns quickly if they want to retain these new customer segments:
"New York City bans Zoom in schools, citing security concerns" https://techcrunch.com/2020/04/05/zoom-new-york-city-schools...
"Instead, the city’s Dept. of Education is transitioning schools to Microsoft Teams, which the spokesperson said has the “same capabilities with appropriate security measures in place.”"
Most services would have buckled (examples abound like robinhoods recent outage) and part of their stack would have not been able to handle the load.
On top of that they are in new customer segments that I bet they didn’t see as their user base. I know more than a few elementary school teachers who are now hosting zoom classes with 15+ 5 year olds on a call.