A service mesh moves controls into the communication layer

A service mesh handles identity, encryption and policy between services, so applications do not each implement it themselves.

That is a real improvement in consistency: one place to enforce mutual authentication rather than hoping every team did it. It is also new infrastructure with its own control plane, its own failure modes and its own privileged position, which is a trade rather than a free gain.