Your question is API Access and Data Checksumming. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
Hand-write a small project: obtain access via an API endpoint (no direct DB connection allowed) and compute a checksum from the returned data. Asked in the phone_screen stage. Candidate confirmed all reads and writes went through the API, not a DB connection; the role was security infrastructure.