No remote cursor should be used by default. There is a setting in noVNC called "local cursor" which is disabled by default.
On operating systems which doesn't have a local cursor, Android on touch devices for example, the HTML5 client should draw it's own cursor.
Upstream bug: https://github.com/kanaka/noVNC/issues/296
Fixed in revision 27939.
Updated in revision 27952.
Also moved the "HTML5 client should draw it's own cursor" part to bug 4813.
Only seeing the local cursor on desktop, and the remote one on iPad. So looks good to me; closing.