Internal service-to-service calls are often wide open because they're 'inside.' Giving machines verified identities — and requiring them to authenticate to each other — closes the lateral paths attackers use once they're past the edge.
“Your servers trust each other blindly. Attackers noticed.”