I am not a user of rustdesk. But from its source code[1], I think does have some warnings about the change. It says,

> "Warning" > "Current Wayland display server is not supported" > `Fix it` => a button triggers system gdm config change > A 'Help' link to github, showing how to change the config manaully.

I wouldn't count it as malware. But I don't think it's OK to change the system configuration by pressing a button of a remote desktop software. It should simply provide a link to user instead.

[1] https://github.com/rustdesk/rustdesk/blob/45375517b960add901...