On the one hand, I agree with a lot of what you’re saying here.
With that said, I don’t think it’s reasonable to describe setting up Tailscale as similar to “Linux server that runs 24/7 with OpenVPN and iptables”. Sure, you could go that route, but a Tailscale setup is extremely simple and lightweight. A raspberry pi is plenty if there isn’t already a system running 24/7. I personally have this set up on my router.
I point this out while still sharing the general sentiment of negativity towards Bambu here.