If (huge if!) those screen shots are legit, then Anydesk was storing passwords in cleartext or equivalent; many of them are far too random to be bruteforced so quickly.

The last one, where both the domain name and password start with QR, makes me think the screenshots might actually be legit.