tldr: Since firebase RTDB security rules only support single-statement conditions and the allowed variables are very limited, I can\'t check whether a user submission is allowed