Tailscale doesn't, but there's another opensource project which does provide control plane: https://github.com/juanfont/headscale.

Even with a on-prem control plane, you probably want logging setup to detect when unusual nodes get pushed to the accessible list of nodes on your clients.