Should I connect supabase via plugin?

So keep hearing horror stories about how CC/Codex went rogue and deleted the entire database.

Is there only way to give only read access? - read tables/ RPCs/ edge functions without ability to write sqls?

Workflow suggestions to safely use this connection? Mainly using codex for investigations prior to any changes.