Yes, this is required now because WDAC won't allow anything to run that is unsigned. I'm trying to find a work around and nothing at this stage seems to work. This is especially important when dealing with on-demand support instances

Is there any progress on this? We have a few clients that have mobile techs using LTE connections and the only way to get them to re-connect it reboot their computers.

That's what I'm find too. I constantly have to restart the screenconnect service daily otherwise I have instances where it's uncontactable. I have resorted to creating a cron job that runs daily

This would be ideal in conjunction with Let's Encrypt

This would be awesome if it could be implemented by you guys. Anything to increase security especially now that hackers are targeting MSPs to propagate Crypto through MSP tools.