[bradwood]

> can't the CEO just use the Tailscale network to access it privately

How many CEOs you know gonna install a VPN client on their workstation to see your stuff?