I have been working daily with GraphQL for 6 years and have no idea what the author is talking about. And I cannot find a single thing sustaining his claim in t

I have been working daily with GraphQL for 6 years and have no idea what the author is talking about. And I cannot find a single thing sustaining his claim in the article. There are difficulties with GraphQL such as limiting n+1 requests while also having complex db level permissions. But I really don’t see how sql injections would happen more often than with classic rest.