How would I protect my cart table in supabase. When user adds items to their cart how am I suppose to have the backend verify the calculations and not rely on the user client to send that data? Or is that more than Supabase is able to handle and I would need to develop my own backend.

You could use a procedure for changing the cart, that way you have full control of inputs and what gets changed