My understanding of tailscale is you give full access to the tailscale company to allow any public key to access any of your machines.

I think I'll stick with running my own wireguard thanks.