Supabase does not make sense sometimes
It gets messy very fast if you need any complex logic, which is why business logic almost always ends up on the application server in a traditional stack, not the DB.
However we're entering an age where database + authorization may be more and more available as an all-in-one solution. More vendors are realizing that REST style services are just a facade over a database anyway - so why have an application server?