Firebase functions open user creation via admin sdk
Flags functions that use the Admin SDK to create users (admin.auth().createUser()) if the function is publicly callable or lacks strong authorization checks. This poses a risk if the project's overall authentication strategy aims for controlled registration (e.g., admin-only user creation).