As I understand anyone can get the Data Url (https://to-do-list-it-is.firebaseio.com/) from my source code, build an application using this Url that will display all the data from this Url which can be happily manipulated. Or at least tracked.
Lets say I want to build a contact form using Firebase. Everyone can send contact details to Firebase App but only I can view the details and delete or edit data. What is the security on this? Does someone has an experience with this?