API Gateway versus calling services directly. What's your pick?

been thinking a lot about how to best expose our microservices. we could put an api gateway in front of everything, handling concerns like auth, rate limiting, and request routing. or, we could have clients call services directly, which might simplify initial setup but could lead to complexity down the line. what have you found works best in practice, and what are the biggest trade-offs youve encountered