Insecure Firestore Security Rules & PII Exposure

After poking with firebase R/W Realtime Database (Unauthenticated): https://[REDACTED].firebaseio.com/.json (Access Denied) Storage Bucket (Unauthenticated): https://firebasestorage.googleapis.com/v