Comment by eurasiantiger

That assumption is wrong. GraphQL can deliver auth, file downloads, even streams.