Mathematically, RLS is powerful because policy enforcement happens at the relation level, not application level. Every query is constrained by the same predicate. Security becomes a property of the data model itself rather than a convention a developer must remember to follow.