An Attacker's View of Serverless and GraphQL Apps Abhay Bhargav