It's super easy to get data from the backend - both for just getting data as you want, or to access queries. But you must configure the security to enable this. 

1. To allows users to get all items of a certain content-type, enable read-permissions on the content type
2. To allow users to run queries, enable read-permissions on the queries you want to provide