This has a greatly reduced effect. What you have to keep updated is the accessible properties.

As I said, it's similar to writing a SQL view and giving access to that. Difference being, GraphQL is a lot more appropriate especially for web REST endpoints