By moving access to your data-driven normalized tables into stored procedures representing a schema-driven API, you can have them both.

And you can lock down your critical production databases from arbitrary sql