Glad to hear you've come around on zero trust! How did you apply zero trust to the webapp you mentioned, if I may ask?
One nice thing about it is it does the right thing if the client is in my house (connect via the LAN) or if I am out or about. Early on I had the tablet disconnect, but I found out that I just had to restart the Tailscale client and it was back up right away.