Google keeps warning insecure rules

Question

For my gaming app, I have set the firebase database rules as follows
{
 “rules”: {
 “.read”: “auth != null”,
 “.write”: “auth != null”
 }
}


  The nature of the game is user has to input data to the database. I mean the authenticated users.

All the players at that time will input data to the same directory. If I secure the rules other than the above, users cant post any input, so the game cannot be played. App allows user to post data only under certain circumstances and they cannot update any data as they like. the code does n't all that. But google keeps warning about the insecure rules. My question is Can auth user update database from some other source other than from my app?. Thanks.