Earlier quoted context omitted.
In my ears that's just neglect? You assume your ORM does the basic data mapping right and don't verify it?
No? The difference is to verify it ones for the orm VS ones for every single place your query.
As you've mentioned graphql you probably comparing ORM in that sense to an traditional custom API with backed by raw sql. In a fair comparison both version would do the exactly same, require the same essential tests. Assuming more variations for the raw sql version is just assuming it does more or somehow does it badly in terms of architecture. Which is not a fair comparison.