Your Supabase anon key can probably read your whole users table

Here is a Supabase row-level security policy. It was on a profiles table holding names, timezones and...