How secure is Firebase Authentication?

Firebase Authentication provides identity management with support for email/password, OAuth providers, phone auth, and anonymous auth. Authentication alone does not protect data because security rules must enforce access on every database and storage operation. UNPWNED tests externally observable anonymous-access and endpoint signals. Authentication-provider configuration and account lifecycle controls require Firebase-side review.