[ftcHn]

Would it "get rid of the need to be in a VPC"? I think yes.

It looks like by enabling Data API, you expose that endpoint to the entire internet - which is secured like all the other AWS services with HTTPS, IAM, etc.