In Zoom's case this seems to be working as intended. Clearly you are intended to be able to join the meeting with only the hashed password, that's what the sharing URL feature is for. It's probably more of an obfuscation feature, so people don't file angry bugs about how Zoom URLs reveal the plaintext of their terrible reused password.