What that means

Network membership alone does not expose a service to the host.

Boundary

Publish only what is required, prefer loopback for tests, and remove temporary routes.