I thought that was an Azure trademark… But really, with proper authentication in place and preferably built-in to a GraphQL-enabled datastore, a GraphQL server

I thought that was an Azure trademark… But really, with proper authentication in place and preferably built-in to a GraphQL-enabled datastore, a GraphQL server can more secure than your average self-implemented HTTP API. The latter can easily leak through e.g. haphazard app-level joins. Meanwhile, the GraphQL server can secure things at object level, much like if people actually integrated their frontend authentication all the way to their (No)SQL server.