MyMVC VS adr-example

I needed to create a CRUD application with authentication from scratch for a job interview. I didn't actually manage to do it in time, but I thought it would be a good exercise to create the basics, and if I had to do something like that again, I would already have the foundation. So I got inspiration from some videos/articles and made this. I was wondering if I could get a code review. Keep in mind this will never be actually used for production, but if there are some obvious security flaws I'd be really glad to know.

Here. For now I only implemented simple get routes.

Adding to the above link a full ADR Example - https://github.com/pmjones/adr-example

Yes, as an example, the First Application's business logic (not that it's much) doesn't tie itself to the framework, as one example. Odan's Slim Skeleton, ADR Example (yes, I know you are the author), and the Aura Payload example class can be seen as other examples.

ADR (as opposed to MVC) - direct link - example

https://github.com/pmjones/adr-example - Follow up example to the above. ADR is an alternative to MVC

More on ADR (like MVC) - https://github.com/pmjones/adr-example

Another option, to me and speaking to the OP as an alternative, it is simpler to add some Data Mappers/Repositories to abstract away the Database code. Good examples is the sample ADR application, Payload library example, Slim 3 First Application, or this Slim 4 Skeleton application

Simple example of a MVC/ADR (Action-Domain-Responder, similar to MVC) system - https://github.com/pmjones/adr-example

Call your class (which doesn't look like a controller anymore...), then, output it to your HTML or JSON renderer, based on the check. You can do this in a class (or 2 - look up ADR - https://github.com/pmjones/adr-example) or in the router.