TR: What do you recommend for a reliable microservice security strategy? OG: “Any organization that is exposing one or more APIs for external access should deploy some form of API gateway.