Mike Fitzmaurice has provided a very nice explanation about the boundaries for Microsoft Support. A very good read – not only for WSS and SPS. Most stuff also applies to MCMS.
Btw: Mike also has a nice article about direct database access for SPS/WSS. Very similar statements as outlined in my own previous article on this topic for MCMS.