Question: do i need csrf protection?
Answer: CSRF protection is not used to protect data. It is used to protect a user from unknowingly changing state, such as transferring money or logging out of an account. Thus, if your GET request is changing a state (which it shouldn't be), then you should have CSRF protection.