Your scanner says this table is fine. It is leaking.

Summary

A table can have row level security enabled, a policy that looks correct, and still hand every row to the wrong customer, because Postgres combines permissive policies with OR.