Lots of databases are open by default, especially in this space (Mongo, RethinkDB, Redis, Riak, and I believe Cassandra), and Fauxton has huge warnings that you&#x27;ve got access turned on globally if you haven&#x27;t adjusted the setting, so I&#x27;m not sure I agree with you that that&#x27;s an instant fail, but I get your point.<p>That said, in CouchDB 2, it&#x27;ll be easy to programmatically restrict document information in a similar method to Firebase. I can&#x27;t find the CouchDB 2 documentation itself, but <a href="https:&#x2F;&#x2F;github.com&#x2F;rcouch&#x2F;rcouch&#x2F;wiki&#x2F;Validate-documents-on-read" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;rcouch&#x2F;rcouch&#x2F;wiki&#x2F;Validate-documents-on-...</a> , from rcouch, is the current plan. Do note that CouchDB doesn&#x27;t do Firebase-like OAuth workflows, so you&#x27;d still need a thin shim in prod to handle that if you don&#x27;t want to have all bespoke user accounts, all the time. (There&#x27;s probably a clever way to make this work using client-side OAuth workflows, but I&#x27;ve never actually thought about it much.)