These other replies highlight what people are willing to overlook. REST APIs still control what they send. They don't have [to have] a complex parser. You can

These other replies highlight what people are willing to overlook. REST APIs still control what they send. They don't have [to have] a complex parser. You can say they're "the same". GraphQL is an extra layer for developer-overlook (by design) and exploitation.