This package is for use with API KEY. That means you are accessing Firestore unauthenticated and security rules are applied. So you can access only "public" collections.