You can get firebase-admin to honor the security and validation rules if you want: https://firebase.google.com/docs/database/admin/start#authenticate-with-limited-privileges