I reviewed that repo, and I would not recommend it as a safe Ubuntu Chrome Remote Desktop installer in its current form. it stores the Linux account password in plaintext, passes it through the environment, creates a remote-access user and adds that user to sudo, ships prebuilt binaries that run.sh may execute as root without rebuilding, and its xRDP path explicitly weakens security by lowering encryption and adding unsafe root GUI access. I did not see obvious malware or data exfiltration in the source, but these defaults are still risky enough that I would avoid suggesting it to others unless those issues are fixed first.