The apps and data are still all on my hardware, Tailscale just brokers the wireguard connections and can't see the traffic.

I get what you mean though. It's a link in the chain for sure. Never had an issue with it so far though.