Yes You are right. This is why I’ve cautioned against using GET with sensitive or large payloads in my article.

However, it’s important to keep in mind that using POST purely for data retrieval can deviate from REST principles.

POST can be the right choice when security or payload size plays vital role in the API.

I appreciate your perspective. Let me know if you have any other insights to share!

Cheers