FieldWebform DataProducer fails to return webforms due to incorrect access checking

I’d appreciate some feedback on this, as I’m unsure whether my proposed approach is appropriate or if using OAuth authentication would be a better solution for querying the webforms.
In our projects, the GraphQL endpoint is never publicly exposed, which is why I considered this alternative.