If the goal is just to have harder boundaries, it seems like entirely the wrong tool for the job and comes with a ton of unnecessary baggage. Something like java's module system seems like a much better way to try to enforce API boundaries. Of course, there are languages that lack an equivalent but which can be used to write microservices.

Au contraire, an attacker must understand and then navigate the web you have woven which as we all know is impossible. Security could not be more perfect