my first thought is that this seems less secure than using a private ssh key and locking your machine down to only that ssh key.

you're essentially using google as your machine login, which seems like weaker security, imo.

edit: I'll caveat this and say, I think Tailscale is fantastic! I've been using it personally on my machines for a few months now, and it is awesome.