The amount of people claiming to be happy to have never gotten on the Tailscale (or other virtual network layer like Nebula) boat is too damn high. Remember people, it's just a layer. I.e. GitLab seems to have a new set of critical CVEs every week now, and I have been glad to have Tailscale (plus a physical firewall) as a layer in front of it. Total stress level would have been higher without Tailscale.

And before people start coming up with alternatives, I know, but they either have the same (theoretical level of) attack surface (ie [managed] Nebula), or they require much more manual work (ie Wireguard) and are therefore more sensitive to misconfiguration.