If those machines are in the same rack, why you don't put them on the same subnet and use a different interface when moving files around instead of Tailnet?
That's exactly what we do, which is why adding Tailscale SSH to our current workflow isn't helpful, since we would still have to manage SSH keys for access via the local subnet.