I don't know if many people run FastAPI directly without any reverse proxy, load balancer etc. in front of their services.
Probably this is why it is marked as medium.