Because Tailscale is a [1] direct connection. No middleman service with access to your traffic. [1] In some cases this is not possible and there are relays set

Because Tailscale is a [1] direct connection. No middleman service with access to your traffic. [1] In some cases this is not possible and there are relays setup to help route traffic. What's in the traffic is opaque to these nodes. You can also choose to use your own nodes. If you are interested here is a great post on how this works: https://tailscale.com/blog/how-nat-traversal-works/ https://tailscale.com/blog/how-nat-traversal-works/