OOB: ".. during the SSH protocol’s authentication phase, the Tailscale SSH server already knows who the remote party is and takes over, not requiring the SSH client to provide further proof (using the SSH authentication type none)."
https://tailscale.com/kb/1193/tailscale-ssh/#how-does-it-wor...