Service meshes often encrypt traffic that may be running on the same physical host. Your security policy may simply require this.