You can do all of those things with wireguard as well… I’m not seeing any benefit to running Tailscale/headscale.