Providing some kind of API as a library, REST, RPC or whatever would almost always be preferable, if only to centralize permissions and validation.
Providing some kind of API as a library, REST, RPC or whatever would almost always be preferable, if only to centralize permissions and validation.