One thing I love about PostgreSQL is that security features are built by database people, not bolted on by application devs later. The engineers behind RLS spent 10, 20, even 25+ years on PostgreSQL internals. That's a very different level than "we added some middleware."