Aggregate-Only Exposure

A signed-out caller collapses a correct-looking RLS policy into using (true)

The policy checks identity and then a block list, and for a caller with no session the first check goes null while the second inverts to true, so Postgres passes every row. The only way to see it is to run the predicate as anon.