They are the only sensible solution for auditing. They cannot easily be bypassed even when modifying data directly with interactive SQL and I would not design a system without auditing using triggers. This type of design has saved us many times.