Security is a platform property, not a page
Tenant separation, permission checks and audit records are enforced on the server for every request.
What is enforced
Row level security
Every table carries policies; nothing is filtered in the browser.
Server-side permissions
Permission checks run inside server functions, not in the interface.
Append-only audit
Sensitive actions are recorded with the acting person and time.