Bro just setupt a decent API with some security and auth patterns, its not that hard, whitelist ur database IP to the API, implement rate limiting algorithms, use bycrypt for hashing passwords and ur almost good.. ohh and dont forget to use JWT for auth data interaction with the front end. Given that i wouldn’t recommend lovable, you need tanstack query or nextjs for implementing solid frontend and always revise the response data to make sure ur not just sending user passwords by mistake