1.if that table is a materialized view with columnstore index then you can run it as many times as you want.

2. always hide postgREST behind API gateway/load balancer/waf/ids+ips/rate limiter and you will be more secure from stuff lile this