Yes, since Tailscale is based on wireguard.

Probably not the best practice, though, since any device that connects will be allowed to use the service if there is no authentication on the cert.