Tailscale gives every device a private, encrypted address that works from anywhere. Here's how I use it to lock down client infrastructure, AI deployments like OpenClaw, and remote NAS backups.