Zcash has a policy/protocol whereby, if a shielded pool is found to have been inflated by a bug, it may end up that legitimate coins within that pool can never be spent again. That policy is encoded in the consensus (ZIP-209 / rule that the pool balance can never be negative). Would you put your money there? These are the things that the idiots promoting Zcash don't tell you. And yes, there has already been a bug, although not exploited, that allowed coins to be counterfeited: CVE-2019-7167.