It was because I needed to run validation over the inputs sent to the server, and then update other data which the user themself did not have authorization to access.
Use what you find useful. I often use Appwrite just for Auth + Avatar/profile management. Something I do for every app... something that I find painful to do for every app :P