Not the first time I read a shitty implementation with Firebase, I'm not blaming the platform, but seems there is a huge skill issues around it.
Wasn't a dating app exposed this year with same negligence or firebase security?