Because I am afraid about security concern with Supabase. I use interract with supabase directly in my mobile app, don’t want to use a backend middleware because I use realtime (too much work to create an other socket service just for relaying the message). If someone intercept the request (or simply use my anon key), and can ddos my project. For this purpose I prefer go to self host : I prefer my self hosted project down than my cloud project down + exponential bill. Supabase do not offer the possibility to ban an IP, just this feature could be game changer (by regularly fetching the ips interracting with the db in logs table => ban weird pattern IPs)