I'm confused, the whole news is that you can directly call lambdas without having to go through API gateway, like you do on cloudflare?
You still can of course but it's one less thing you have to do.
Like another comment said you can expose it through IAM/SDK but then you're getting random permissions credentials whatever out to the world as well.