With nearly all websites running https now, is it safe enough to surf without vpn these days.

Adding dns-over-https so your ISP can not collect where you're going.

As far as google etc collecting your info, it will work the same as long as you're using their service, with/without VPN.

I do use VPN(tailscale) for work so I can access corporate internal network, but for general surfing purpose, do I really need vpn these days.