Best way to apply the Namespace borders?

ACL (Access Control Lists)
1

Devices on tailnet with mutiple namespaces are able to communicate with each other.
One of the ways is to add a same tag to all devices under same namespace and add TAG based ACL.
is there any other better option?