When attempting to configure my first machine over a Tailscale VPN:

Tailscale creates a private mesh network using WireGuard, and allocates each node a permanent IP from the CG-NAT range above (local to the private mesh).

mist.io excludes this range, breaking the use case of monitoring hosts over Tailscale. Unlike the private and localhost subnets, there's no escape hatch via settings.