Yeah, sometimes for practical reasons you don't want to, or can't test directly across the API, as good testing practice would dictate.

Taken to the extreme, the philosophy I laid out leads to something that looks like "only integration and end-to-end tests" depending on your architecture.

So I try to be pragmatic whenever possible, but I think leaning towards BDD works better, after 18 months of doing it.