At least in version 0.0.6, tlsdate and tlsdated are installed into /usr/bin. I think they should be in /usr/sbin, as both programs require root privileges to operate. See ntpdate and ntpd for example.
I'm not 100% sure but I think this is intentional by upstream. tlsdate and tlsdate-helper are run as unprivileged users by tlsdated.
right, this is what upstream has decided. even that said, the argument for sbin-vs-bin is kind of pointless as the kernel invests more in namespaces and privilege dropping.