When a solution requires this kind of hacks for a simple task as rate limiting, maybe the solution is a bad one to begin with.<p>With REST it is fairly easy to do rate limiting on endpoints.<p>With GraphQL, it is fairly easy to DDOS with a complex query that will ask the server to fetch an insanely complex data structure. And there are no endpoints anymore.