Turns out a new release is needed sooner to bump the min Node version so it's possible to update npm-registry-fetch to a version that uses updated tar...
This version will have the Node version bump plus a few other fixes.
NOTE: If you want to remove the bad tar dep before this release, use beachball@2.60.1 which is just before npm-registry-fetch was introduced.