The GraphQL Asterisk Problem: When Benefits Come with Caveats