One of our requirements is to disable schema downloading in production in apollo server. (We can have it enabled in dev/local). Can this work if that is disabled? (Yes we know this is silly but our auditor caught it)
Where this might have an issue is with persisted queries. But then you'd need some sort of client/server build tooling to keep them in sync.