Firebase rules for secure access without sign-in?

Do not judge on the login output block, but it is still recommended to use a valid email: YOURGmail+ID@gmail.com
You don’t need to use the uid it gives.