Supabase built in API vs Roll Your Own Backend?

Basically wondering how people decide when to build their own backend vs use something like supabase's API in combination with some rules to ensure rows don't get updated when they shouldn't.

But being a fullstack engineer, I feel like I know that more-or-less "direct" access to the DB is not really a safe thing to do, and would be better off deploying my own node server or series of serverless functions for greater control & validation.

Wondering everyone else's thoughts 🍻