Tailscale SSH now has a web console, complete with an entire copy of Tailscale running in the browser. That's the magic of Tailscale: https://tailscale.com/blog/ssh-console/
@cadey@moonbolt the answer to "tailscale requires centralized third-party auth?" is "yes". headscale is not tailscale and does not have any of this wacky unnecessary ssh userspace networking stuff.