title: How do you prevent client side console hacks on firebase web apps?
body: <p>It dawned on me that with so much client side logic, malicious users can spoof, override or game firebase apps by using the console in any browser.</p>
  
  <p>For instance, I can enter $(".flag").click() and with three strokes flag every post out of existence on my  app.</p>
  
  <p>Any defensive logic I write will all be available to anyone who wants to crack it.</p>
  
  <p>How have you dealt with this? Is there a work around?</p>