Isolation is enforced by the database, not by remembering to filter.
Every tenant-owned table carries row-level security with FORCE applied, and the application connects as a role that cannot bypass it.
We will send a link that lets you set a new one.