As far as I understand, in a Supabase setup everything in the "public" schema is exposed via PostgREST.
However, since the "public" schema is also the default schema in PostgreSQL (i.e. any statement which does NOT explicitly reference a schema, will use it), it is easy to accidentally expose internal data to the world via PostgREST.
PostgREST allows specifying which schema to expose (
https://postgrest.org/en/v7.0.0/configuration.html#db-schema) - can we use that in Supabase and change the schema which is exposed?