This is not a binary choice - SPA's remain a valid pattern for the right use case. The point is knowing when to apply the pattern. Aside from that they have some great features, including security; ;they largely reduce the attack surface to supply/dep chain, and an API interface - which is a great pinchpoint at which to apply mitigations, monitoring etc.