Supabase gives you the tools, documentation, and community that makes managing databases, authentication, and backend infrastructure a lot less overwhelming.
RLS works without using gotrue Auth. If you are providing your own jwt's then you can even get info from them that PostgREST (the database API) provides similar to how auth.uid() function works. Otherwise you do RLS with selects on your table (although not sure how you are providing a user id)