Your understanding is correct - the only requirement is a minimum of 6 chars.
However, if you are building Android/iOS apps, I would suggest -not- to hardcode the validation logic in your app, since the new user signup request is handled by Firebase Auth server.