since cyper-based (instead of sql), is the key question whether my k8s data is more graph-like or relational?

adjacent but lots of experts here - independent of Cyphernetes or specific tooling, what are you doing to secure k8s api / kubectl / k8s control plane?