Actuator adds operational endpoints like health checks, metrics, and info (e.g., `/actuator/health`, `/actuator/metrics`). It helps monitoring and debugging, but it can leak sensitive data (env, config, internals), so you should restrict access and expose only what you need.