Your Supabase Database Is Probably Public Right Now
Supabase ships your database to the browser on purpose. Row Level Security is the only thing standing between your users table and everyone. Here is how RLS works and how to write policies that hold.