Do you have ‘Embed Without Signing’ turned on for those zoom .app binaries? Look under Project Settings > General > Frameworks, Libraries, and Embedded Content.
I’m resigning those binaries with the Developer ID before archiving. I’ve been testing distribution, but ours will probably be done with MDM, using the notarized application.