[henryfjordan]

You should triple-check the configs for your Firebase instance, make sure you understand all the security implications.

If you release the app as open-source make sure you remove references to your specific Firebase instance.

I'll also say that the app being open-source isn't the problem. As you can see from the blog-post, there's a LOT you can do just from looking at the frontend code delivered to your browser.