I come from ASP.NET with SQL server web development. where the database is not exposed to the end users, and we interact with the database using service account inside the connection string. but in SharePoint things by default are different. Where all users can access the SharePoint lists. so my question, does SharePoint online support a scenario, where we can block the users from accessing the SharePoint lists (using built-in forms, API call, etc ) so they do not have any permissions on the lists and instead we interact with SharePoint from Power Apps or other means using a service account. so we can apply all the business logic and validation we want inside the code (Power Apps or custom application which interact with SharePoint)?