From launch page:

> This traffic is rerouted to an SSH service inside the Tailscale daemon instead of to your standard SSH server.

Was their sshd code audited? This is a lot of trust to use different sshd imho.