title: Is it problematic that Spring Data REST exposes entities via REST resources without using DTOs?
body: <p>In my limited experience, I've been told repeatedly that you should not pass around entities to the front end or via rest, but instead to use a DTO.</p>
  
  <p>Doesn't Spring Data Rest do exactly this? I've looked briefly into projections, but those seem to just limit the data that is being returned, and still expecting an entity as a parameter to a post method to save to the database. Am I missing something here, or am I (and my coworkers) incorrect in that you should never pass around and entity?</p>