Yes. Every endpoint will be subject to document count usage (including `nodeos`-compatible `/v1/chain`). Which means that you must provide an authentication token (through HTTP Authorization header) for every endpoint.