The public keys are stored on the server (by necessity) but not the private keys. The actual connection is directly between two of your own machines, or routed through a DERP server (encrypted end-to-end) in rare cases.
But if you’re concerned, you can instead self host headscale or netbird.
You could use Moonlight as client and Sunshine as streamer, both are in the store app.
And if you don’t know about port forwarding you can use ZeroTier or Twingate (it’s like Hamachi)
I found Tailscale to be easier to install and configure than ZeroTier, and also to have better performance.
I have never used Twingate.
Yes, but tailscale is a privacy nightmare, because your private keys are stored in their servers
The public keys are stored on the server (by necessity) but not the private keys. The actual connection is directly between two of your own machines, or routed through a DERP server (encrypted end-to-end) in rare cases.
But if you’re concerned, you can instead self host headscale or netbird.