So the general tailscale actually uses peer to peer wiregaurd connections. Headscale is the middle point to negotiate these wiregaurd connections.

So none of the traffic moves through the VPS.

As for a VPS itself, it’s noore unsafe than your local bare metal. It’s still an application publicly exposed and needs basic precautions like fail2ban or crowdsec

Because building space ports and rocket launches have 0 impact as well.

But you acknowledge this, so what’s your point? Why pay a techno billionaire when we can publicly fund cables way cheaper and more friendly?

If we can figure out how to put them on the bottom of the ocean and pipelines over just about any terrain, I think we can figure this out