Need for protecting Test endpoints.
The test endpoints are no guarded by Istio and have their own implementation of JWT validation (Authz and AuthN). The logic for the same is not tested and is prone to accidental change. If there is a change that weakens the validation mechanism, it will make the service vulnerable to attacks.
ITs/UTs should be written to protect the endpoint.