Comment by raggi

Tailscalar here: Tailscale servers never see your traffic in plain text.

In the integration with Mullvad in particular, WireGuard connections are always direct from your device to the selected Mullvad exit node.