Currently, it is entirely possible for a user to reset a password that is unsecure with firebase's miniapp

it does not validate against the default password conditions or reference the identity toolkit policies

a community member has created a temporary fix
https://betterprogramming.pub/firebases-password-reset-is-insecure-here-s-how-to-fix-it-882629e3b779

I propose this reset dialog gets enhanced to a standard.
and allow projects to integrate password policies from the identity toolkit
https://cloud.google.com/identity-platform/docs/password-policy