Streaming live at 10am (PST)

Quick question about Firebase

I am following the excellent tutorials on adding Firebase to my website - if the API key etc is all in the browser code does this make it unsecure? Am I missing something?

Thanks!