Firebase is a cloud datastore that’s accessible directly from any connected client. Because any client can connect to any Firebase, you must write security rules to secure your data . Failure to write proper security rules will leave you wide open to attack.