Block anonymouse user from write.
match /item/{item_id} { allow read: if request.auth.uid != null; allow write: if request.auth.uid != null && request.auth.token.firebase.sign_in_provider != 'anonymous';}
NOTE: Refer auth. Possible values for request.auth.token.firebase.sign_in_provider
includes custom, password, phone, anonymous, google.com, facebook.com, github.com, twitter.com
.