The major gripe I have with BaaS platforms like Graphcool or Firebase, is that they offer basically no protection against third parties stealing my public data

The major gripe I have with BaaS platforms like Graphcool or Firebase, is that they offer basically no protection against third parties stealing my public data straight from my API. With my own backend, at least I can throttle or ban clients that are incurring in abusive behaviour. Same goes for rendered HTML – to avoid scraping. Is there anything in the Graphcool roadmap regarding this?