

It runs in the kernel of the OS as a driver, which means that it’s basically a trusted malware that has even higher permission than the admin of the computer, and have access to more things than yourself, to closely monitor the whole system in order to find signs of cheating.

The headscale integrated one is mostly enough, you can choose to include the tailscale official ones with their URL as well.