Secure application data

Hi, I’m working on a “vibe-coded” personal project that stores personal financial data. The frontend is deployed to Vercel, backend in cloud run(GCP) and database is in Supabase - all free tier. Here are some steps I’ve taken to secure the data/app: AES-256-GCM encryption for all sensitive identi