So ,
I know Firebase encrypt data at rest according to this question.
question is do they use a unique key per account , also where are those keys stored.
This is more a compliance concern.
See Question&Answers more detail:
os 与恶龙缠斗过久,自身亦成为恶龙；凝视深渊过久,深渊将回以凝视…
