I mean I'm just lazy. I could use Headscale or implement my own wireguard control plane.

The apps and data are still all on my hardware, Tailscale just brokers the wireguard connections and can't see the traffic.

I get what you mean though. It's a link in the chain for sure. Never had an issue with it so far though.