Use App Check - reCAPTCHA to restrict HTTP requests from unauthorized domains. References: - Firebase App Check [[link]](https://firebase.google.com/docs/app-check) - Firebase App Check / reCAPTCHA v3 [[link]](https://firebase.google.com/docs/app-check/web/recaptcha-provider) - Firebase App Check / reCAPTCHA v3 docs [[link]](https://developers.google.com/recaptcha/docs/v3) - Compare reCAPTCHA Tiers [[link]](https://cloud.google.com/recaptcha/docs/compare-tiers)