FYI I just now caught a critical missing step of disabling IPv4 in your Tailscale settings to doom code via cell service. Many of you probably did not have an issue figuring out that missing step - but for those of you like me, apologies for not passing along the time-saving lesson learned!