Amen to the weird network quirks. I was trying to use the Tailscale docker sidecar examples, but could not work put how to use them in quadlets.
I expect i need to make a .pod or .network file and comingle the quadlets that way, but just setting up a dedicated tailscale subnet router VM with /32 allowed addresses was about 10x easier.