You really should create a public.profiles table with only those things you want viewable. You really should not mess with RLS or column security on anything in auth. https://supabase.com/docs/guides/auth/managing-user-data