As cyber threats become increasingly sophisticated, traditional perimeter-based network security models have proven inadequate to meet modern security requirements. To resolve this issue, the Zero-Trust Architecture (ZTA) framework was developed. ZTA ensures that all access requests, whether originating from within or outside the network, undergo rigorous verification, eliminating implicit trust and enforcing continuous scrutiny of all network interactions. Although ZTA offers significant advantages, its application within the Internet of Medical Things (IoMT) is limited, requiring deeper exploration and further investigation to advance its development in both academia and industry. To bridge this gap, this paper presents a review focused on the applications of ZTA in IoMT for enhanced security and privacy, highlighting the various challenges associated with its implementation. Key lessons learned from the review are provided, along with recommendations for further research directions. This research can be an essential resource for both academic and industry sectors in advancing the understanding and enhancement of privacy and security within the IoMT ecosystem.