True, we should probably limit the `read(...)`.

> The goal was to prevent this.

Kind of.  The big issue is not really the memory to buffer the request, but the memory and time required to deal with parsing and creating the data structures when lots of fields are being included - capping the memory size is just a way of dealing with that.  But yes, good point and worth tweaking.