Install and run Zoom Client inside a sandbox
Zoom is available as a Snap: snap install zoom-client
Snaps are confined to their own filesystem using squashfs loop mounts and AppArmor rules. However, Zoom needs routine access to quite a lot of your hardware (USB ports, audio, screen, camera, network) in order to be useful. Also, the application needs to be detectable by others on the system (so e-mail invitation links work). So complete sandboxing seems a challenge.
Some problems with Zoom (like the ability to bruteforce an access code) are outside the OS' control.