People really dont take this stuff seriously enough, but my experience with Firestore (circa ~2014) was that it was too "easy" with a lot of stuff.
Not sure how to describe this, but it's almost like the product gives you the false impression that you're done setting it up when there's still things like security rules that you need to learn and know about.