I seriously dislike adding a package source for a single application. It feels dirty to me. I can't explain it but it makes me feel like I need to take a shower.

I don't use arch but this looks cleaner than whatever Debian or fedora (both of which I use) have going on

https://tailscale.com/kb/1036/install-arch

Alternatively, I feel much better when the upstream vendor is the one packaging and signing the software I install, instead of a (possibly malicious) volunteer from my distro's repository team.

Tailscale works great, but it's annoying to have to have an always on VPN on android for it. I need to switch tailscale off if I need to switch to another VPN.

Also when I have it on my private DNS stops working, which to be fair I haven't put a huge amount of effort into solving yet.

I love it for things like ssh to a server at home, but for things like hosting a service I prefer something like cloudflare tunnel or a self hosted reverse proxy. Though tailscale funnel looks promising.