I use this to help my grandma remotely! The two steps needed were to join her into my Tailscale network and set up SSH with key authentication only.

No I am now able to SSH into her computer and enable VNC (remote control) and connect to the VNC-server over SSH-tunnel like this.