[tumdum_]

Tailscale is using userspace Go implementation of wireguard, right?

[p_l]

Yes, with the wireguard implementation being very deeply intertwined with the rest of the VPN implementation, resulting in sometimes higher speeds than in-kernel wireguard implementation.