🚀 Enhancement: Prevent tampering query by client

### 🔖 Enhancement description I really can't find the relevant documentation about this. for example in official graphql we can define schema which all fields can be queried, if client modify to include not defined field, it will not spit any data. For example i have client side requesting field1,filed2 like: ``` import { Client, Databases } from "appwrite"; const client = new Client() .setEndpoint('https://cloud.appwrite.io/v1') // Your API Endpoint .setProject('<YOUR_PROJECT_ID>'); // Your project ID const databases = new Databases(client); const result = await databases.getDocument( '<DATABASE_ID>', // databaseId '<COLLECTION_ID>', // collectionId '<DOCUMENT_ID>', // documentId [ Query.select(["field1", "field2"]) ] // queries (optional) ); console.log(result); ``` But the client can just modify the query to include field3,filed4 and so on. How to prevent this? Since I cant find any documentation about securing the query. ### 🎤 Pitch Appwrite promoting accessing the data directly via client a lot instead using server as middleman. but no documentation at all about securing it. ### 👀 Have you spent some time to check if this issue has been raised before? - [X] I checked and didn't find similar issue ### 🏢 Have you read the Code of Conduct? - [X] I have read the [Code of Conduct](https://github.com/appwrite/.github/blob/main/CODE_OF_CONDUCT.md)