Not to me, yes the app sucks, yes the use case of the app also sucks, yes devs are either super green or even mostly AI (these have been discussed extensively and I agree with all).

But can't commend public release of such sensitive data in such a place. You can still bury this app and the company without compromising people's sensitive data. Makes for less of a show and less opportunity to boast but yea.

Firebase's default configuration

I'm going to get on my grumpy old man soapbox. I understand making things idiot proof for end users. End users are idiots. But do we have to make things super safe for developers now too? Do we want to add a warning to rm so we don't accidentally remove the wrong directory?

Any developer who doesn't know to check permissions and accessibility on their database deserves to have their AI vibe coding bot taken away.

I mean this is just writing a script to access a public database, this is not even exploiting a code vulnerability. So there is an area between digital number waterfalls on the screen and accessing a public database which I would consider more of hacking.