Tailscale and wire guard, it's underlying vpn application, have a big stake in being secure. Webmin not as much more focused on providing features and being secure. There is much more surface areas for a web application over a simple vpn service. And self hosted you probably aren't implementing intrusion monitoring as serious as tailscale web services would.