Because 99% of people that use it are non-technical and don't care or don't think they're at risk.

The news of such vulnerabilities probably doesn't even reach them.

Same reason people didn’t drop Windows, Mac OS, Intel, and other companies that had vulnerabilities.

The vulnerabilities here are comparable to those reported on the OS vendors and Intel but installing spyware is another level.

A major vulnerability with a sincere response is not that bad. Software is very difficult. What killed my respect for the zoom team was the PR bullshit that they engaged in after it was discovered. Major companies have been known to fuck up and recall their faulty products or offer reasonable solutions (e.g. exploding batteries on the note 7, the intel chip bugs). The reaction shown by zoom was that of a whiny child caught in the act of stealing cookies and denying it all ---"Those are not really cookies you see!" It was so ridiculous it was not even offensive.

Same reason why people don’t drop windows or any OS for the last couple decades.

Why do you lock your front door with a Yale key when you know it can be picked?

I had no idea Zoom even existed before the Covid quarantines of this year.

I saw them on HN when they allowed to remotely turn on the Webcam on Macs.