One thing that comes to my mind is you don’t have to deal with port forwarding. But does it decrease overall attack surface in any way? My big plus for using tailscale at all is it has basically zero attack vectors other than through devices through devices on the same tailnet.