It's much more complicated when other risks are involved. It's like someone sold you a bun by labeling it as gluten-free, but it was not. Maybe you're just slightly intolerant and nothing lasting happened to you, but you could still sue them.

Unlike that example, it's difficult to know if there were direct damages, but some big companies can come together and try to make a case and sue them and demand huge compensations. Zoom could have spied on your conversations and sold your information to competitors even though they sold the product claiming that they couldn't.