Tailscale is really polished and convenient but I have the impression they can inject a host in your network without your permission.
Discussion
https://tailscale.com/blog/tailnet-lock/ aims to eliminate that risk, though at the cost of some convenience.
Security is always at a cost.
That makes things better. Thanks!