Caching GraphQL at the Edge is Really Awesome, but it would be too costly to allow everyone to send a queries that might have Spamming. One Solution for these problem would be Rate Limiting, but Implementing CORS would be very cool. Also CORS don't prevent from Server Side Query Requests.