It is not obvious to somebody trying it out that even if they switch up to a paid subscription, they would still depend on dodgy third parties to authenticate.
It's pretty clearly documented on the Tailscale website. This is not something they are hiding.