Because you also need proper access controls. In many cases database access is too low level, you need to bring it up a layer or two to know who can access what

Because you also need proper access controls. In many cases database access is too low level, you need to bring it up a layer or two to know who can access what. Even more so when you want to do more than read data.