Hacker News

Favorites Setup
Comment by yakkomajuri | original | Lovable apps expose passport details and more than 200K private messages
[−]yakkomajuri · 2026-11-15 Sun 15:23 UTC · link
Agreed. Nothing inherently bad about RLS itself, but the way it was pushed forward in the Supabase model was always bound to be dangerous. Because like you say, it requires proper DB design, whereas the selling points of the Supabase model are simplicity and speed, so there's a bit of a mismatch here.