The controller may charge for the copy of the data no more than the cost of copying, and may object to abusive requests, particularly by their number or repetitive or systematic nature; in a dispute the controller bears the burden of proving the request abusive.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.