[AlphaWeaver]

What makes this even more sloppy for the school is that I know for a fact that Firebase will send your admin account an email when it detects that you have weak security settings on your database. It also sends said email repeatedly, once per day.

I know because I intentionally have a developer db that is read access for the whole world and I get that email every afternoon. The admin of this app either is not competent enough to know what that email means, or is willfully ignoring it.

[mattlondon]

Or registered on a "throw-away" gmail account created for this app that no one is reading.

[bartread]

> The admin of this app either is not competent enough to know what that email means, or is willfully ignoring it.

Or it's being filtered into their junk folder.

I'm not making excuses for them, btw (there's just so much else wrong here): just pointing out that this happens quite often with even legitimate automated messages.