I use Supabase when the alternative is a week of glue. Row Level Security is the point, not the dashboard. If I skip RLS because "it is just internal," I will regret it when a shared link leaks.
Tables stay boring. Events, items, locations. Views for current location. I do not invent a new data product.
Keys in the right places
Anon key in the client with RLS. Service role on a server or a one-off script I am staring at. Never service role in a warehouse phone.
When I would not
If the company already has a locked-down identity stack and a data warehouse team, I plug in. Supabase is speed, not a personality.