Can a Microsoft Entra Security Group be created using SharePoint CSOM (ClientContext) instead of Microsoft Graph?

I'm developing a SharePoint Online migration tool.

Currently, I create Microsoft Entra Security Groups using Microsoft Graph:
await graphClient.Groups.PostAsync(group);

I would like to know whether the same operation can be performed using SharePoint CSOM (ClientContext) instead of Microsoft Graph.

Specifically:

1. Does SharePoint CSOM provide any API to create a Microsoft Entra (Azure AD) Security Group?
2. If not, is Microsoft Graph the only supported API for creating Microsoft Entra Security Groups?
3. If CSOM cannot create them, is the recommended approach to:
   • Create the Security Group using Microsoft Graph.
     • Add members using Microsoft Graph.
       • Then use CSOM only to assign permissions in SharePoint?

Could someone from Microsoft confirm the supported approach and provide any official documentation?