I don't think this is the "gotcha" you think it is.
1. The developer isn't Chinese, he's Singaporean. The "Chinese" found in the cert path was literally gibberish, most likely garbled unicode.
2. They were using a dev cert for a virtual video driver, which they're working on getting proper signing from MSFT and also have a workaround virtual driver in the mean time. https://x.com/rustdesk/status/1781263566504653052
> I don't think this is the "gotcha" you think it is.
Sorry it came across as a "gotcha"; just meant as a potentially-relevant HN post from a few months ago in the spirit of sharing and curiosity.
But digging a bit further, I did find a few HN comments from two years ago that may be worth considering; pizza234's "I personally discourage people from using this software."[1] and proto_lambda's "If this is the kind of thing that's considered acceptable by the developer, I'd rather keep their products far away from my machines."[2]