Supabase table readable by anonymous users

Why it matters

Anyone on the internet can read this table with the public anon key from your website.

How to fix it

Enable Row Level Security on the table and add a policy that only lets users read their own rows (auth.uid() = user_id).

How we test it

Passive — runs in the free check, looks only at what a browser can see.