Is it acceptable to leave the database (Cloud Firestore) unprotected if site registration is not required?

Question

I create a game with Angularand (for the first time in history). I am trying to add a high score table. I created an account Firebaseand got a working base Firestore (Beta)and connected.

I need a very simple point system. Users will not need to log in or create an account, you just turn on, play, and then, if you reach a high score, enter your name and it will be recorded and displayed in the table.

So my question is: in a situation where registration is not required and only the basic name / score / timestamp data is stored, is it acceptable to just leave my security rules below or is there a better way to structure them?

service cloud.firestore {
  match /databases/{database}/documents {
    match /{document=**} {
      allow read, write;
    }
  }
}

As they are, I get a warning that my database is open to everyone who has the link, but is it really that bad in my specific situation? Are there any problems with this that I do not see as the newb database?

Any advice would be great as this is a new (and complicated) territory for me.

Greetings

Answer 1

I would like to use the red blinking underlined text here, but you definitely should not leave your database with this set of rules in place.

, , . , , - ( ). - , , .

, , :

• .
• (,
• ( XSS)
• , , score name, ( ).

Answer 2

, testing purposes. , , . ( ), , , . , , . .

, .