I had a client I was contracting for who was using it and it's super over-complicated to do anything remotely advanced. I guess it's good at the very basics.

But I've been running wireguard manually for years and it's so easy to configure that tailscale is just a hellish nightmare for me. Even basic things like port forwarding from a public IP, I couldn't really figure out how to do, where with just plain wireguard it's like 2~3 iptables rules.