I hear this before but im no expert.

I recall the moaning long ago that one should never construct sql queries client side.

But it seems you get a luxorious api for free?

I recall people wanting access to order history.

With a bit of code the user could even create their own order process?

It seems if a user has 12 company accounts they could also have an overview db account with read access.

Maybe you can even get rid of the front end entirely :)