I found that tags-file-name is not a safe local variable.
It seems like it should be, so I've attached a patch.