Controller and sql

Hello,

Can I user   something like this
$db = \Config\Database::connect();    
 $query =  $db->query('select * from mytable');  or whatever query to process the result.
inside a Controller instead of model 
what will be the risk of using this kind sql stuff inside Controller ?
also what is the advantage of  Model ?

Thank you