1 questions
Security Rules are a separate, declarative configuration that Firestore evaluates server-side on every read/write request, deciding whether to allow it based on the requesting user's auth state and the data being accessed — they're your only real line of defense since client-side checks can be bypassed.