What are you trying to do?

Currently, tailscale can be enabled & disabled from the lockscreen without providing credentials/unlocking first.

Contrary to for example enabling/disabling bleutooth, wifi & other system settings (apart from display settings) which require verification first.

In my usecase, tailscale has the same 'value' as other system settings, and i would prefer to it not being disabled accidentaly on the lockscreen in my pocket, or by somebody who is not me.

To give an example of a hypothetical scenario; i'm using https://gitlab.com/Nulide/findmydevice, with a selfhosted communication server, not accesible on the internet but through tailscale. Accidentally disabling tailscale or being able to disable it on the lockscreen without verification in this case renders this whole setup useless. (I know the phone could be turned of aswell as easily, but nevertheless an option to ask for verification first on lockscreen would be nice).

I would even go as far as saying this should be default behavior, at least from my perspective.

My environment:
Pixel 9 pro
GrapheneOS android 15
Tailscale app 1.78.1-t**** (f-droid version)

How should we solve this?

If possible, let it behave like other 'important' system settings and ask for verification while used on lockscreen.

What is the impact of not solving this?

No response

Anything else?

No response