If you can’t change the CGNAT this solution might work for you.
https://community.roonlabs.com/t/tailscale-implementation-with-arc-to-circumnavigate-isp-cgnat/215356