It is only necessary to protect GPIO exposed to system-level ESD (connector, button) otherwise embedded HBM is enough.