Question/docs request: Is a `tailcat` address a secret?

The tailcat docs say:

Is a tailcat address sensitive?

Yes. The address grants access to a specific connection. Treat it like a password. Don’t log it, commit it to source control, or share it with anyone who shouldn’t have access. Definitely don’t tweet it.

That pretty clearly states that a tailcat address should be treated like a secret.

But the tailcat blogpost says:

generates a tailcat address, which is a string of the form: tc + base64(CBOR( public key + DERP bootstrap info ))

you then share that address string with somebody out of band, either directly, or by putting it in a DNS TXT record, and sharing that DNS hostname out of band

Which (at least the way I interpret it) implies that the tailcat address is not a secret, because you can put it in a TXT record.

Is this an error in the docs? Or am I misunderstanding the docs?

Start by comparing the linked tailcat documentation section with the tailcat blog post passages quoted in the issue. Confirm the intended security implications of publishing an address in DNS, then update the relevant documentation so both explanations agree and clearly describe when sharing is safe.