Basically it is managed Wireguard. Tailscale does say it, but it is buried under marketing speak.
It's also P2P mesh rather than hub and spoke which is quite important
This. People are doing the same thing that OP mentioned in this thread.
It's also P2P mesh rather than hub and spoke which is quite important