They negotiate the tunnel between your devices and in some cases even relay all encrypted traffic. So yes.

If you are uncomfortable with that, consider running Headscale on a cheap VPS.