That just moves the problem, since headscale will require a server you manage with an open port. Sure, tailscale is nice, but from an open-port-on-the-net pers

That just moves the problem, since headscale will require a server you manage with an open port. Sure, tailscale is nice, but from an open-port-on-the-net perspective it's probably a bit below just opening wireguard.