I think you make some good points here, and RLS is an ideal data security model in many respects. The parent's point is that tooling around this is weak, which

I think you make some good points here, and RLS is an ideal data security model in many respects. The parent's point is that tooling around this is weak, which undermines its value. Not being able to review and easily test authz changes will almost certainly lead to issues.