Everything crosses at the same place
Twenty agents each talking to every service on their own are twenty places to rotate a credential and none to look at what the whole thing has done. With one door there is one credential, one declared identity and one record. The cost of the alternative does not show up on day one: it shows up the day something has to change.