> as far as I know, that is the only portion of tailscale that tailscale keeps proprietary

Also the iOS client, which is hard-coded to only use the first-party control plane, so you can’t use headscale if you have iOS clients :(