Also, why not compile VNC into WASM and get full remote desktop experience for graphical apps. It seems that hard work has already been done!

Yup. :)

In fact, that's mentioned in the original public bug: https://github.com/tailscale/tailscale/issues/3157