The Default Trap: Why Your Supabase Project Might Be Leaking Internal Data

This discovery highlights a critical security gap where Supabase's legacy 'auto-expose' defaults can leave sensitive tables open to the public if RLS isn't manually toggled. As the industry moves toward 'secure by default' models, this serves as a vital reminder for developers to proactively audit their database permissions before upcoming enforcement deadlines.