it seems this tplink router won't do the tailscale without openwrt & i don't want to go this route. i do want to add a vpn but in a 'streamlined way'. the nordvpn will install on this router, but it's not free.
so when you say don't use port forwarding, you mean wireguard?