If you have the skills for setting it up, than that's the best way to deploy tailscale, the true zero trust method, just keep it in house.