There are indeed only the 4 mounting points already on the roof. Gamiviti suggest adding additional mounting points using rivnuts, that's what I will be doing on my 4Runner. 4Runner Racks — Gamiviti
Looks like Gobi has 4 attachment points plus 2 legs resting against the roof. Seems like a lesser solution in my opinion.