Asked the same question in the Firebase Google group. Seems like the Firebase team will update the server certificate on their end:

You are correct. Firebase servers will handle these updates.

https://groups.google.com/g/firebase-talk/c/KM9qydwykyg/m/V130qhduAQAJ