Every request should be logged, timed and protected from crashes. Copying that code into fifty handlers is how bugs are born. Middleware wraps a handler so the work happens once, for every route.