Man I got excited until I saw the date. I disagree with always returning 200 (why should the caller need to parse the response to find out there was an error). Then again I don't understand why you would reach for graphql unless you are a massive org with a lot of front end teams (which isn't my works use case even though someone got distracted by the shiny thing and made it the standard) so my opinion is probably skewed.