I’ve used Firestore a few years back. Just checked and indeed the same vulnerability is present. Users can’t create/change submissions with a different userID b

I’ve used Firestore a few years back. Just checked and indeed the same vulnerability is present. Users can’t create/change submissions with a different userID but can change the userID of their own submissions, thus impersonating someone else. Of course, that was 2021 and I had barely started programming. Not sure if I’d make the same mistake now (of using Firestore in the first place :)