Maybe tailscale.com/blog/ssh-console/ could help - they run a tailscale client in webassembly in the browser, plus a ssh client also in webasm, so you can get ssh to the tailnet without installing anything.

Because this works over DERP it probably even works on very locked down computers behind very strict firewalls, e.g. that only allow TCP 80/443 :)