Yeah, GL.iNet GL-AR300M16-Ext is perfect for this purpose, very affordable and compact. You can configure the wireguard client, and then "Block non-VPN traffic" so it allows ONLY connecting through the VPN. Very handy! GL-SFT1200 should be a great option as well, currently the cheapest GL.iNet markets for their "travel AP" line, and you can run Tailscale on it[0]. I'm not sure about the AR300M16.
("Ext" means it comes with external antennas, version without that suffix has internal antenna if you want it to be even more compact)
Damn that one looks pretty good. Are there any with usb-c so I can hook my laptop to it via a usb-c cable and get a usb Ethernet gadget device, and can then carry one fewer cat-5 cable?
("Ext" means it comes with external antennas, version without that suffix has internal antenna if you want it to be even more compact)
[0] https://forum.gl-inet.com/t/tutorial-tailscale-on-gl-sf1200-...