> 2.6 million plaintext passwords and user IDs This seems really odd to me. If you use Firebase Auth, you never see or get the users's password at all unless y

> 2.6 million plaintext passwords and user IDs This seems really odd to me. If you use Firebase Auth, you never see or get the users's password at all unless you are also copying it (on user login or registration) and storing it in another collection on your own, and then not hashing or securing that. The 2.6 million number could also conceivably be just a handful of really popular apps (or even just one!).