I probably wouldn't expose it, while I don't think it's been a problem in the past, with LLMs being used to find vulnerabilities so much in the past few months it seems prudent to do everything you can reasonably do to secure things.

Tailscale is so easy to use it seems worth the bit of extra hassle.