Queue Graphs are shown (as links) on http://router/graphs even that the visitor is not allowed to see them.
I am running RouterOS 5.21 on my x86 machine.
No login the visitor can see the graphics. The alternative I know is spreadable by Firewall port 80 allowing only specific IP.