Consider adding a warning

[zunjae]

Hi there

Could you consider adding a fair warning that including this library into a client application is highly insecure and should not be done unless the developer knows 100% sure the .apk can't fall in the wrong hands? Even with encryption, obfuscation or whatever, the Firebase secret token can be captured through an injected debugger or simply by intercepting the outgoing call.

[karanatwal]

Hello @zunjae Thanks for showing interest. Could you please tell me if there is any way to make it secure?

[zunjae]

No

If Google can't even secure it then no one can. The Firebase token should only be used server sided, not client sided.