I understand, technically its possible bith the way, but want to understand experts opinion on this and pros ans cons?
Have client code call a function that performs the relevant work directly instead of having a trigger perform similar work.
Probably should just remove insert/update/delete permissions from most users on that table as well, make the function owned by the table owner and with security definer so it is allowed to perform the needed work. But the normal application user is unable to bypass using said function to perform DML on the table.