How could someone reverse engineer anything other than your data model from gql queries?