Supabase with ReactJS and Prisma

Hi everyone
i'm using Supabase with prisma in a React project (no SSR).
and as we know, to configure prisma we put the link of postgress in the .env file , and this link contains the DB connection information.

is it secure to use prisma in this case ? and how to protect the DB in this case ?

thanks a lot