graphene, strawberry and plain graphql protection against malicious requests