Web remote was encoding Auth2FA under auth2Fa, which protobuf.js drops as an empty message, so RustDesk peers never received the TOTP code after Verify.