This is exactly the point of the original article by Monzo. Microservices don't provide any tool to deal with access control, thus you have to implement it your

This is exactly the point of the original article by Monzo. Microservices don't provide any tool to deal with access control, thus you have to implement it yourself. I rather avoid that when I can.