Nah, it effectively auths you against whatever saml/oicd provider you're using to back tailscale, along with the acls you define. It's not just 'network access = auth'.