Do I need to care about Supabase RLS if all DB access goes through my backend (Bun + Better Auth + Drizzle)?

I am building a web app using Bun, Better Auth, Drizzle ORM, and Postgres.
Right now I'm using Supabase Free Tier just for development. For production, I might either upgrade to the paid tier or move to another managed Postgres host.

Here’s my setup:

• The frontend never talks to Supabase directly.
• No Supabase client SDK is used in the browser.
• No anon key or client-side API access.
• All DB operations happen through my backend only (via Drizzle and server-side code).

But Supabase keeps showing warnings about RLS (Row Level Security) not being enabled.

So I have a few questions:

1. Since my app doesn't use Supabase client-side access at all, is it mandatory or just recommended to enable RLS? Can I just ignore the warning?
2. Is there a SQL command or Drizzle-based migration way to enable RLS on all existing tables and automatically on future tables?