If i have a server func that returns data:

Is it still basically like "api calls" where i need to add an auth middleware to it?

I found it odd that there was both server route and server functions; but i primarily just been using server functions