The security of the devices don’t depend on Tailscale coordination server, if tail lock is enabled. An attacker with access to coordination or relay servers wo

The security of the devices don’t depend on Tailscale coordination server, if tail lock is enabled. An attacker with access to coordination or relay servers would be able to change whatever is in the admin console, which are basically ACLs. Am I missing anything?