I really dig point #2. My only worry is the current state of security in Firebase.