While the service is not used outside of the deployed environment we should consider reconfiguring the deployment in order to allow only internal GCP access to the endpoints.
With such a config we'll eliminate a chance of accessing the service buy non-authorized parties.