I'm also in favor of adding encrypted connections to RustDesk, not to replace tailscale, but as a part of this complete breakfast. Tailscale provides mutually authenticated, authorized L3 access. TLS can be configured to provide mutually authenticated L4 access. With a little OIDC/webauthn setup, both L3/L4 support device attestation, meaning there's no way to connect without e.g. a yubikey (or perhaps an enrolled TPM.)

So I'm supposed to set up PKI before I can open a remote console connection?

Please just make it work seamlessly with my existing SSH credentials. Like SFTP.

agreed, zero-trust solution with proper endpoint security and PKI is superior to transport encryption and insecure protocols