Access could be limited by authorization. Role in JWT for instance. You can't control malicious clients so I don't think the access part holds much water. I t

Access could be limited by authorization. Role in JWT for instance. You can't control malicious clients so I don't think the access part holds much water. I think they are advocating a monolith deployment to maintain contracts across ownership and client expectations as a best practice vs the version management of multiple graphs requiring different cross sections of data for each client. It helps keep it consistent. my 2 cents