Firebase Realtime Database readable

Why it matters

Your whole Realtime Database can be read by anyone.

How to fix it

Replace test-mode rules with auth-scoped rules: ".read": "auth != null && auth.uid === $uid".

How we test it

Passive — runs in the free check, looks only at what a browser can see.