It’s worth noting that in Italy, police communications are encrypted (they use TETRA radios, like most police forces in Europe). I’m not saying it can’t help prevent this, but when weighing the cost and benefits of encryption for police radios, we should take into account that this benefit is not absolute.

Maybe https://tailscale.com/blog/ssh-console/ could help - they run a tailscale client in webassembly in the browser, plus a ssh client also in webasm, so you can get ssh to the tailnet without installing anything.

Because this works over DERP it probably even works on very locked down computers behind very strict firewalls, e.g. that only allow TCP 80/443 :)