Good point. I self host headscale but it also has the ssh feature, probably also insecure.