Or use something like Odata that solves the same problems as GraphQL (returning complete and tailored trees of objects in one go), but uses regular GET operation to it's still compatible with normal http caching?
[0] https://blog.codecentric.de/en/2020/05/how-to-secure-a-graph...