Source: Absolute scale corrupts absolutely · Tailscale Blog

Tailscale is interesting.  They’re pushing auth into the networking level, using WireGuard, so all connections of any type across the net are secure and restricted (if appropriate), and identity is associated with IP.  As one of the founders says, it’s like going back to working on LAN: you can do arbitrarily insecure things, because it’s locked inside a building that only a few people can muck with.  But it’s a LAN you can get to from anywhere and anything.

They also like to build things that are simple to use, by design.