one thing i really liked about tailscale are the fine grain ACLs you can make between nodes in the same network. I know netmaker is a pure wireguard implementation but still one can dream about such a feature.