> the Frontend is allowed to send any possible query to the Backend It's really not, it's not exposing your whole DB or allowing random SQL queries. > It is f

> the Frontend is allowed to send any possible query to the Backend It's really not, it's not exposing your whole DB or allowing random SQL queries. > It is far better for the Backend to provide the Frontend a contract GraphQL does this - it's just called the GraphQL "schema". It's not your entire database schema.