Middleware is not your auth layer (a Next.js footgun I keep finding)

When I audit Next.js apps built quickly (often with AI tools), one pattern shows up more than any...