If your threat profile has you worried about tailscale + tpm, you probably shouldn't be running talescale unless you're also running headscale...

Just a thought.