So the main parts that you need aside from Wireguard support in your OS, is the Tailscale client and the Headscale hosted server?
Is the client fully FOSS? Or are there still any parts of this typical deployment that could be rug-pulled if the company gets enshittified?