This is primarily the reason I am careful going deep into the Tailscale ecosystem (which, similar to earlier Bitwarden, is touting a "hey, we are the good guys" horn for now). My network is a critical piece of my infra and I don't want to put too much trust in one company.
I love Tailscale, but this has been bothering me too. Actually, I think it's an even bigger concern than with Bitwarden because of what Tailscale does - once you start using it, it literally becomes your entire network.
That said, what Tailscale provides is really important. We need tools like this to push back against how rigid and centralized the Internet has become over the years.
For those worried about this: what are you doing about it? Did you just move to Headscale? Or are you using something completely different? How has that worked out for you?
I adopt a 3-2-1 backup strategy for my Bitwarden password-protected exports, which can be decrypted without needing Bitwarden. In addition, I use a separate non-Bitwarden solution for my MFA secrets. This minimizes damage and facilitates migration in the event Bitwarden degrades, or becomes outright malicious like Raivo. The same would apply to the password manager I'd switch to after Bitwarden in the near future, and any other password manager thereafter.