Is Tail Scale ACL a VPN?

There are these things called access control lists which are kind of like firewall rules. The ACL rules are applied at the tail net level for every device in the tail net. Tail scale ACLs are more you know, X is allowed to connect to Y or with tail scale SSH, X isallowed to connect as user Y. And that's really different than like arbitrary capability things like IAM offers.