crypto.randomUUID is undefined in insecure contexts, so the three note
paths added in this window (annotate composer note, Viewer global
comment, review general note) threw and silently lost the typed text in
remote-mode http sessions. generateId already carries the fallback.