Your rows are yours at the database
Every table is protected by row-level security keyed to your account. It is not a filter the application remembers to apply — the database itself will not return another account's loads, whatever the application asks it for.
- Enforced in Postgres, not in the app
- Applies to every table
- No shared-tenant queries to get wrong