API Security

Anybody have thoughts on whether API security will finally become a budget priority? It seems like application security (Snyk) has gotten all the love, despite APIs being a far larger attack surface area

api apis api security application application security area attack attack surface budget cybersecurity far love security snyk thoughts