“By default, new projects set up with Supabase have completely open Row Level Security (RLS) rules, creating a security vulnerability where any user can access any information unless explicitly configured otherwise.”