I don’t see it as there being much of a distinction from the two when you say one is public and the other isn’t, i don’t really see it that way. Wireguard may be more obviously public, but they both technically are, right? Otherwise accessing a node just wouldn’t be possible.

If you don’t need something specific that tailscale offers, then wireguard offers probably better security.

Tailscale uses wireguard, but using wireguard itself is removing all of the extra code and services (their connection facilitation layer?) that go with using tailscale.

Tailscale probably isn’t an inconsiquential amount of code added, so it can be a threat, even if it adds additional security layers (identity?). There’s more code to exploit.

Plus, wireguard is so well used directly by so many businesses, orgs and people who NEED it to be secure, and it has so many more eyes going over it that it I can’t see any way that it would be less secure.

Edit: have never used tailscale cuz i dont need it, so maybe im completely wrong about something, dont think i am tho im confident