rem’s Twitter Archive—№ 65,195

GraphQL: if the entire endpoint is public, what process (layer?) prevents any authed user reading other user's private data? #iamnoob