How a user can update own profile - updateUser

Thanks @larse for the example. This does work fine, but it seems that the policies are still. being ignored for graphql then? Is this a bug that needs reporting?