Best Practices using NextJS

What's good practice when sending data from a form on a protected page?

Do I simply create a supabase client and validate the user on the component itself?

Or do I pass the data to an action on the actions.ts file and send the data to my database there?

Thanks. I'm pretty stuck on this.

I would like some insights!