Firebase storage publicly readable
The storage rules allow public read access to data that may be sensitive. A rule like allow read: if true; makes all files under the matched path accessible to anyone on the internet. While appropriate for genuinely public assets