Protecting data between different customers in the same table is hard. Instead of complex WHERE TenantId = @id in every query, use RLS.
You define a security policy at the database level. The database itself will automatically filter the rows based on the logged-in user context, making it impossible for one customer to accidentally see another’s data.