If you rely purely on Tailscale networking, and trust any process on the client, why do you need PAM (assuming OpenSSH sshd configuration if you can't simply li

If you rely purely on Tailscale networking, and trust any process on the client, why do you need PAM (assuming OpenSSH sshd configuration if you can't simply listen on that address)?