today, I would not recommend GraphQL to most people, and what I think are better alternatives.

Attack surface

Authorisation

Rate limiting

Query parsing

Performance

Data fetching and the N+1 problem

Authorisation and the N+1 problem

Coupling

Complexity

And more...