Many operators are not leakproof and as such will not push down into the RLS query. We had to manually mark the operators as leakproof even though they were not

Many operators are not leakproof and as such will not push down into the RLS query. We had to manually mark the operators as leakproof even though they were not. Operators cannot be made leakproof in RDS, so we had to choose between RDS and RLS. Explain plans for the simplest queries get crazy. So when your perf is bad, it's hard to know why (so RLS gets blamed for more than its share, but it also does cause problems)