That is a very crucial question. I am also interested in the answer.

Perhaps they have RLS type policies that are only modifiable on the server.