I made the mistake of doing this, it seemed to be working fine, and then all of a sudden to add a new node it needed access to my company's GitHub repositories in order to continue. (no way to continue without accepting)
So I could either give them access to sensitive company information, or remove my github account from my company, neither of which I wanted to do.
I just stopped using TailScale, I've been meaning to set it up again with a different login, but the experience left a bad taste in my mouth.
On iOS/windows/macos it doesn't make sense to complain about closed source code running on your machine; on linux/bsd/android the client is open source.
Control plane:
A compatible open source server is available & you can self host; the tailscale-hosted control plane is closed source and could, in theory, instruct your devices to connect to additional peers.
> and the company
The company has several high-profile employees with excellent reputations, which is typically a good sign of legitimacy.
People don't talk about Google not being a legitimate or unsafe company.
Issues with customer support? Sure. Issues with shutting down some products HN loves? Sure. Getting hacked or being insecure? No, in fact they probably have one of the leading security teams (Project Zero) in the industry.