That takes two steps, needs authorization, and needs queries created that way to be stable so that when you execute them with GET you know what you're executing

That takes two steps, needs authorization, and needs queries created that way to be stable so that when you execute them with GET you know what you're executing. This is a lot of application logic to add just to avoid adding a QUERY method. It's just too much.