Agree, but instead we get defaults which will expose and announce services to the world without any auth or warning, all in the name of convenience. And tailscale is far from alone with this as you say, it applies to everything from databases to these services.
Do happen to know if the other services also create unique SSL certs for each service?
