GraphQL gives away to much info and this hurts it's security

Absinthe doesn’t have built-in functionality to disable schema introspection. Absinthe doesn’t suggest field name as it is described in the article. If you disable introspection by your custom mechanism (read more here How to disable Absinthe GraphQL introspection), then you should be safe. At least safer, than Apollo Server users. But, anyway, it is always possible to brute force any API to reveal field or endpoint names.