Comment by zenoprax

"We don't want your passwords."

https://tailscale.com/blog/passkeys

Maybe running your own OpenID service would work?

https://openid.net/developers/how-connect-works/

Too much work though. Easier to just switch to Nebula or Netbird and self-host the full stack.