Added example of security vulnerability where a query selects node but doesn't check if they are published or for node access