diff --git a/samples/todoapp-mvc/TodoApp.Service/Controllers/TodoItemsController.cs b/samples/todoapp-mvc/TodoApp.Service/Controllers/TodoItemsController.cs
index 2a97aa44..225d6d3c 100644
--- a/samples/todoapp-mvc/TodoApp.Service/Controllers/TodoItemsController.cs
+++ b/samples/todoapp-mvc/TodoApp.Service/Controllers/TodoItemsController.cs
@@ -11,5 +11,10 @@ public class TodoItemsController : TableController<TodoItem>
     public TodoItemsController(TodoContext context) : base()
     {
         Repository = new EntityTableRepository<TodoItem>(context);
+
+        // UnsafeEntityLogging is intentionally left at its secure default (false).
+        // This sample stores user-supplied TodoItem content, so only the entity ID
+        // is logged; the full serialized entity is never written to the logs.
+        Options = new TableControllerOptions { UnsafeEntityLogging = false };
     }
 }
diff --git a/samples/todoapp-mvc/TodoApp.Service/TodoApp.Service.csproj b/samples/todoapp-mvc/TodoApp.Service/TodoApp.Service.csproj
index 16bc2b5d..7a88cdea 100644
--- a/samples/todoapp-mvc/TodoApp.Service/TodoApp.Service.csproj
+++ b/samples/todoapp-mvc/TodoApp.Service/TodoApp.Service.csproj
@@ -7,8 +7,8 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="CommunityToolkit.Datasync.Server" Version="10.0.0" />
-    <PackageReference Include="CommunityToolkit.Datasync.Server.EntityFrameworkCore" Version="10.0.0" />
+    <PackageReference Include="CommunityToolkit.Datasync.Server" Version="10.1.0" />
+    <PackageReference Include="CommunityToolkit.Datasync.Server.EntityFrameworkCore" Version="10.1.0" />
     <PackageReference Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.3" />
     <PackageReference Include="Microsoft.Web.LibraryManager.Build" Version="3.0.71" />
   </ItemGroup>