Agree. For me, best practice is to use JSON-RPC for our client to server communication and expose a REST interface for 3rd party CRUD operations.