If my Restful Flask API doesn't need user login, then are the following features enough for the API security:
- There is only a get method in my API, no put/delete methods.
- Queries are parametrized for MySQL.
- User inputs are santized.
Have I missed out something, If yes, please suggest.