Custom peer to peer networks over Wireguard are theoretically more secure. A list of additional potential adversaries who can remotely access your Tailscale network without client manipulation:

- Tailscale’s coordination server

- Tailscale’s cloud provider

- anyone who compromises the coordination server

- SSO provider you have chosen

- SSO’s cloud provider

- anyone who compromises the SSO provider