Keep pulling the thread on Colin Matthews.
By default, new projects set up with Supabase have completely open Row Level Security (RLS) rules, creating a security vulnerability where any user can access any information unless explicitly configured otherwise.
A common and dangerous pattern in many AI coding tools is that they modify a user's database directly, rather than generating migration files for review.
Bolt has recently updated its platform to allow users to use AI agents from Anthropic (Claude) and OpenAI (Codex).
Colin Matthews is updating his SaaS development template to use the new agent kit from OpenAI as the backend for its AI chat feature.
AI-powered prototyping tools Lovable and Bolt both use Supabase as their backend infrastructure.
Supabase released a feature allowing companies to white-label its backend services, which has been adopted by Lovable and Bolt for their branded "cloud" offerings.
Colin Matthews asserts that the recently announced 'cloud' backends from Lovable and Bolt are purely a branding exercise with no functional difference from their previous Supabase integrations.
Lovable has implemented a feature that displays a warning popup when a user publishes an application, alerting them that their data is accessible to anyone by default due to open RLS rules.
Unlike tools built on Supabase, Replit uses a traditional full-stack architecture with a client, a server, and a database.