This has nothing to do with vibecoding, and everything to do with exposing your database directly to the internet.

BaaS sounds cool but, for small apps, understanding and configuring RLS is a lot harder than writing a backend to expose only what you want.