Help managing access to multiple VPN services (Tailscale, Wireguard, Twingate)

I find everyone using different services, so unsure how to best manage (and balance) concurrent access in Ubuntu/Debian to:

• Local network services
• Tailscale services from userA
• Tailscale services from userB
• Wireguard (OpenVPN also option) from userC
• Twingate from userD

Each user is wanting to share different services via VPN, and pressuring any to change their production setups to a different style of VPN is not going to happen.

• Management via software in Ubuntu
• Possibly up a routing device along the lines of OpenWrt or OpnSense.
  • Could even distribute such devices between these friends.

Thanks for all thoughts!