and you&#x27;ll end up with an endpoint that can potentially bomb your datastore<p><pre><code>    query User {
      friends {
        friends {
          friends {
            ...
          }
        }
      }
    }
</code></pre>
how do you prevent something like this happening on graphQL backed with a series of resolves that query a SQL database?