It's still private files. So an oversight by Zoom. A picture of you is absolutely a PII.
>They also don't store your files.
Nobody can prove that. Assume the worst, especially with a company like Zoom.
Remember it was about:
>They have to name every possible thing they can potentially receive
And files certainly fall into that.