Well, if you think about the path that this leads down, you're going to be building SQL statements with string concatenation in client-side Javascript, with no

Well, if you think about the path that this leads down, you're going to be building SQL statements with string concatenation in client-side Javascript, with no server-side business logic in between. That just seems extraordinarily dangerous, not to mention mixing data access code into the UI code is poor design, you need some separation of concerns in order to have a maintanable code base.