What cross-cutting concerns does an API Gateway centralize that would otherwise be duplicated in every microservice?

Authentication/token validation, rate limiting, request logging, and routing/load balancing to the right downstream service — without a gateway, every single microservice would need to reimplement (and keep in sync) its own copy of each of these concerns, multiplying both code duplication and the chance of inconsistent behavior between services.