Firebase functions use of default service account

Flags the use of default service accounts (e.g., @appspot.gserviceaccount.com or the default Compute Engine service account) for Firebase Functions. These default accounts often possess broad Project Editor permissions, violating the principle of least privilege.