I've always had to manually enable this feature. I've never experienced it on by default across multiple platforms and deployments.

I've never used it once. don't even see the point. normal ssh works fine over Tailscale.

What is the advantage? Why would I want to swap the well tested auth in ssh for auth managed by tailscale?