> significant part of the value proposition of Tailscale is their very well designed web UI which makes managing their Wireguard based networks very user friendly.
I think this is an opinion. I don't use the tags/rules, and I literally only use their website to complete the oauth flow to auth a new client. Headscale is a perfectly functional replacement of Tailscale for me.