Is disabling GraphQL introspection the right move? | Dark Hacker News