Look, directly exposing your Hibernate entities through APIs might seem convenient, but it's a shortcut that often leads to leaked implementation details, complex serialization, and tight coupling between your database schema and your external contract. In our recent work on the points-system project, we consciously moved away from this pattern by introducing dedicated Data Transfer Objects