It's super easy to get data from the backend - both for just getting data as you want, or to access queries. But you must configure the security to enable this.
- To allows users to get all items of a certain content-type, enable read-permissions on the content type
- To allow users to run queries, enable read-permissions on the queries you want to provide