Installation Token Stored in Local Cache

[the-recondite]

We ran an audit on our application and an authToken was found in a file with this path /files/PersistedInstallation*.json. With further research, it was found that this token is an installation token from Firebase which refreshes itself after 7 days. There's a refresh token that remains for the lifetime of a firebase installation. We also found a package that helps us refresh this token when we want if we want it earlier https://pub.dev/packages/firebase_app_installations. We still have a few concerns though:

1. Does this token put an authenticated user using our app at risk?
2. Does this token put us the owners of the firebase project at risk?