Thanks, that makes sense. The rules are unchanged, but they refer to db fields, that themselves are protected by the rules. I was critical of the firebase secu

Thanks, that makes sense. The rules are unchanged, but they refer to db fields, that themselves are protected by the rules. I was critical of the firebase security situation when they launched, but this looks like a good solution indeed.