I wonder if a third-party solution for the signature key distribution is feasible; I suppose it should be, because it's appears to be just a file.

This way, if you don't trust Tailscale to distribute these lock-controlling keys, you could run a different mechanism of your choosing that would effectively control what nodes are automatically admitted.