Exercise 3: Why This Course Shares a Gap With Django but Not With Firebase — Possible Solution ==================================================================== WHAT'S ACTUALLY TRUE OF THIS COURSE AND THE DJANGO SIBLING ------------------------------ Neither Food Tracker (React + Express) nor Food Tracker (Django) ever built a real multi-user ownership model into their own app - in both courses, every item in the database belongs to whoever can reach the server at all, with no per-user filtering, no login requirement, and no concept of "whose item is this" anywhere in the code that was actually written. Both courses use a server architecture where adding real authentication and per-user data scoping was entirely possible, but neither course actually did it. WHAT'S DIFFERENT ABOUT THE FIREBASE SIBLING ------------------------------ Food Tracker (React + Firebase) took the opposite path in its own Chapter 11 - it actually implemented Firebase Authentication and used it to scope Firestore data per user, extending its own Security Rules to enforce ownership. That course's own honest scope note is different as a direct result: it doesn't need to name a missing ownership model, because it genuinely built one. WHY THE SCOPE NOTES DIFFER FOR A GENUINE REASON, NOT AN OVERSIGHT ------------------------------ The difference isn't that this course or the Django course forgot something - it's simply that neither one chose to spend a chapter on authentication and ownership the way the Firebase course did, and both are honest about that being a real, named gap rather than presenting the app as more complete than it actually is. WHY THIS WORKS AS AN ANSWER ------------------------------ It correctly explains that this course and the Django sibling share the same real gap (no ownership model actually built, despite it being technically possible), correctly contrasts that against the Firebase sibling's own actual implementation of per-user authentication, and correctly frames the difference as a genuine difference in what was built, not an inconsistency in how honestly each course reports its own scope.