> Don't expose `orders` as a field on `User`.

Why not use Open API then?

- I've never found any openapi/ swagger generated client as easy to use as a graphql client

- graphql solves a lot of other problems when querying microservices

- graphql gives us PR-level alerts on whether any schema changes are safe

- graphql actually manages our front-end query caching / updating quite nicely