List of available fields shown when used an invalid one

[AntoineLemaire]

When we use a field that does not exist, it display the full list of available fields.

GraphQL/src/Validator/ResolveValidator/ResolveValidator.php

Line 52 in b080756

throw new ResolveException(sprintf('Field "%s" not found in type "%s". Available fields are: %s', $ast->getName(), $objectType->getNamedType()->getName(), $availableFieldNames), $ast->getLocation());

But it seems to be not very secured. And I don't see any way to avoid this. Am I wrong? The only way I have was to fork and remove it, but do you think it's normal to have the full list?