Wouldn't surprise me, but this isn't really google's fault. As a product with a ton of appeal to the least experienced developers, lots of mistakes happen. My

Wouldn't surprise me, but this isn't really google's fault. As a product with a ton of appeal to the least experienced developers, lots of mistakes happen. My understanding is that (assuming you trust google) there's no reason you can't build a secure application on firebase.