I am in the gov't contracting world, and let's just say I'm not impressed with the "stringency" of FedRamp controls or evaluation.

Plus, as noted, Zoom has lied repeatedly about what they do, how they do it, where their data goes, etc., and every time has somehow escaped any real repercussions. They are not trustworthy, regardless of certification.