Local Development Exposes Everything To The Local Network?

I'm getting started learning supabase using the cli and I noticed that all the docker containers that 'supabase start' creates are listening on all addresses. I can go on my phone and access the supabase studio client on my computer and run sql queries and see everything by default. open-webui has similar behavior but at least it requires a login. Is there a way to restrict supabase to localhost and require authentication to use the studio client?