TL;DR yes, it's fine. The apiKey essentially identifies your Firebase project. It is not a security risk for someone to know it. In fact, it is necessary for them to know it, in order for them to i...