A GraphQL endpoint with introspection turned off still answered a guessed query field that returned the flag.