They negotiate the tunnel between your devices and in some cases even relay all encrypted traffic. So yes.
If you are uncomfortable with that, consider running Headscale on a cheap VPS.

GitHub
GitHub - juanfont/headscale: An open source, self-hosted implementation of the Tailscale control server
An open source, self-hosted implementation of the Tailscale control server - juanfont/headscale