The watcher here is only for dummy endpoint owned by Ingress object (label cilium.io/ingress: true). It's just a convenient way to upsert (i.e check from cache then perform update or create accordingly), so I don't think we need to watch endpoints or endpointslice in general.

There is a discussion to find a way to remove this dummy endpoint as well.

Originally posted by @sayboras in #18867 (comment)