Great post about the API Gateway Pattern. Thank you!

My two cents on the two cons we observed in this pattern:

For the god API anti-pattern:

I believe we could clearly state and document what's the API Gateway scope and don't accept business rules more than that. In other words, have lean business logic rules implemented.

Single-point-of-failure risk:

We should be sure to have good observability implemented in the service and monitor its performance with automated alerts (like with Prometheus, Grafana, etc).