I've written about this solution in the context of running LLM-generated SQL safely. I call it the "cloned database view" solution[1].

The author touches on 2 issues that are tangential to this problem, restricting unauthorized data, and mutations, both of which are not really easily solvable with the cloned database solution.

However, the underlying theme of skipping the API is extremely compelling. So much code, both FE and BE, are just to serve as an elaborate interface to the database. Simplifying this will be a huge gain in software maintenance. But the challenge is to do it safely.

1. https://docs.heimdallm.ai/en/main/blog/posts/safe-sql-execut...