there are few things that improve your defense posture:

- DDOS attacks can only attack the fabric and not the business logic service. Fabric nodes can be easily moved around or added to change attack surface.

- you can have multiple services hidden and you don't have to worry about protecting them individually

- service nodes themselves can be moved around or added for redundancy without having to stand up additional protection middleware