I was not claiming Tailscale has to be trustworthy. Though, thinking about it, it's a privileged software running on every node in the virtual network, that is

I was not claiming Tailscale has to be trustworthy. Though, thinking about it, it's a privileged software running on every node in the virtual network, that is controllable from outside (cloud). So yeah, it needs to be way more trustworthy than some static wireguard setup you setup on a VPS.