> 24,664 websites sent database records from Supabase as soon as they loaded, without requiring a login or any other interaction.

Oh boy, open season on those entry points