> Comically you can sign Tailnet lock from iOS, but it’s an insane workflow.

Interesting, thanks for pointing out the insane workflow.

Although looking around, footguns still remain in terms of relying too much on iOS and Tailnet Lock, e.g. https://github.com/tailscale/tailscale/issues/20475