Protect APIs and shared resources from abuse and accidents; essential for public endpoints and multi-tenant systems.