As u mention functions are not monitored via VPC Flows by default so what are the chances and reasons developers would decide to do this?