Firebase Cloud storage: when generating signedURL, why service account for app engine is used?

Question

I have a express server that generates signed url for file upload:

app.get("/signedurl/:filename", async (req, re