I've had people tell me that they trust postres RLS as their security boundary and that it's fine to expose.