Your point about the ACL semantics is crucial. Tailscale's policy language becomes another domain-specific thing you have to learn and maintain, separ...

That "blizzard of uncorrelated alerts" is exactly the problem. The question of which fails more gracefully is the right one. In my experience with bot...