1 item (1 fix)
When a lobby query drives a connect, validate the exact lobby candidate you will connect to — not results[0] — or a peer can connect to a lobby it never validated (build-skew, wrong-host connect that no gate catches).
Want to know when new guides or fixes drop? Join the community to help build this out. Report gotchas, flag outdated fixes, or just lurk.