Depends on your use case - for prototyping using the prisma endpoint directly might be acceptable, but you probably don't want it to be open to the public, since it is after all just an abstraction layer over your database, ergo everyone who knows the endpoint can hit all of the queries and muations, which you probably want to avoid, especially when dealing with userdata and/or content