as much as handing control to a remote third part is, yes.

Good point. I self host headscale but it also has the ssh feature, probably also insecure.