Native rate limiting for client-side SELECT requests to prevent egress abuse

I have a Next.js SaaS on Vercel that communicates directly from the browser with Supabase, secured with RLS. My concern is that a malicious authenticated user could script millions of SELECT calls from the browser console and generate huge egress costs. Is there any native Supabase mechanism to prevent this without routing requests through a server-side proxy?