Well, WireGuard and WebRTC, but yes.

The real feature of Tailscale is being able to connect to devices without worrying about where they are.

You might be confusing it with netbird, which is the 601st implementation of a mesh network that does use both WebRTC and WireGuard.

There's no WebRTC in Tailscale.

Isnt a derp server juat webrtc with minor changes?

You don't need the whole of WebRTC for NAT traversal, TURN/STUN will do the job.

Edit: apparently it uses STUN/TURN but not WebRTC

Nat punch is a big part of it, but so is key management/sync, and configuration management.

...and DNS, and host provisioning, and SSO, and RBAC, and other stuff you need to sell to enterprises.

tailscale is a wrapper around wireguard in the same way that dropbox is a wrapper around rsync