Of course it makes sense. They're both query languages, right? Why is
{ project(name: "GraphQL") { tagline } }
Better than select tagline from project where name = "GraphQL"
Especially if the GraphQL server is just an intermediary later that ends up being translated to SQL anyway.That real answer to the parent's question is that most people don't have confidence in SQL servers's access controls.