SuperTokens would work equally well with or without graphql/redux. Their usage is nothing todo with security.