I have read this thread and I have it working right now! I have added a custom route inside my /plugin/server/routes/index.js and added this handler inside my /plugin/server/controllers/my-controller.js. Inside this handler I make some queries to normally protected strapi endpoints for public.
This new route is protected and with using the getFetchClient() it returns me the expected response 
Thanks for helping!