So, the firebase customer database got stolen (or firebase got owned) and their customers are receiving phishing mails using those email addresses since September at least - however, I never received a heads up from Firebase. What gives? That's not a good way to build up trust.