Why can't I just let customers connect directly to my database?

security.stackexchange.com