isn't this a issue of tools given to llm instead of llm. the tools lack of basic RLS check