Global middleware applies expensive operations to all routes

Applying expensive middleware (body parsing, authentication) globally with app.use() causes unnecessary processing for routes that don't need it, including static files and health checks.

Scope middleware to specific route prefixes or individual routes. Apply bodyParser.json() only to /api routes. Exclude health checks and static assets from auth and body parsing.