I'm new to firebase and angularfire. AngularJS is client side code. Its public to anyone. What prevents a hacker from taking the following firebase reference, and using it in another app?
var peopleRef = new Firebase("https://<my-firebase>.firebaseio.com/people");
$scope.people = $firebase(peopleRef);