Tangential, is there any Airtable clone which filters rows/columns for read/write based on user privileges? Seems most of them give full access to all rows in a given table. AFAIK only my side project does this.

You can do this soon with Baserow. We're currently working on view-level permissions, where you can give a user access to a specific view. That user will then only have access to the filtered rows and visible fields.