The Vercel-like auth company Vercel's CEO invested in default recommends middleware for protecting routes:
https://clerk.com/docs/references/nextjs/clerk-middleware
You wouldn't get a user's info, but you'd get free reign to explore every page of a product