Mixing and matching a C(reate) or U(pdate) api call into a single request is exactly why its better. Logic can be checked, verified, confirmed, denied and rolled back.

Multiple entities with multiple endpoints are harder, if not impossible to enforce.