This comment might be of interest to help you understand what Tailscale does that WireGuard cannot: https://news.ycombinator.com/item?id=47064875