I checked, and Tailscale only allows a single Owner [1], so it would still be pretty disastrous if the Owner account was suspended by the single sign-on organisation.

[1] https://tailscale.com/kb/1138/user-roles#owner

So almost like SSO being the paywall for some enterprise apps.