So what API gateway can help us solve this problem "more easily" and is Apache APISIX a good choice? Has anyone tried it?

I just did a quick read:

> Zero Trust is the next level for API security, though it is not a silver bullet

How to better understand the "silver bullet" point?