You're right to notice that the Services module in Drupal (especially in versions 7 and early 8) sometimes implements its own access checks rather than relying on Drupal's standard entity access system. This includes the comment resource, HumanToCat Translator