Security comes in layers. If someone compromises your DNS server, or switch, (or does arp poisoning, etc etc) for example, but not the reverse proxy, (and it resolves backend via DNS and it doesn’t validate/pin certs), they could intercept the traffic transparently. If you have SSL on that link, it massively reduces the attack potential.