When I first saw GraphQL, I was like "This is some overengineered shit that is going to be the next cargo cult"
Then I got actual exposure to it, and I think it's amazing in certain scenarios. You can easily make CRUD apps that allow a front-end to pick which database rows you want to update, and you create a metadata file that describes the database and applies permissions.
You get so many things for free, and the result is you have far less code to write and fewer bugs, especially around RBAC.
That being said, like many technologies, there will be people that try to use it for things it shouldn't be used for.