Getting a 'relayed' connection

That assertion in the Tailscale docs does not seem to check out. Other people and I regularly experience DERP-relayed connections between a machine with PCP and/or NAT-PMP available and one on a NATed VM in GCP or Azure.