You can self-host ZeroTier controllers, in which case this is impossible. ZeroTier roots can be federated too, but that's less important for this concern becaus

You can self-host ZeroTier controllers, in which case this is impossible. ZeroTier roots can be federated too, but that's less important for this concern because roots have no authentication authority. They're just like STUN/TURN servers.