> Activate the Zoom link and hope the person is AFK. Spy on their home/office/whatever. Also a violation.

I think this is the most likely scenario. There are ways you could potentially delay it (e.g. they leave a tab open and you don't open the link until a certain time)