having abused a number of firebase databases I can say that the domain restrictions that firebase has don't do anything at all.