It can still do that, but it can't get what programs you have running or the other data collected by the desktop client.

Beyond the privacy concerns it's a security risk. Their desktop client had a remote code execution vulnerability last year:

https://www.zdnet.com/article/researcher-says-zoom-web-serve...