You are correct. Data validation rules would be useful in our scenerio. But for a number of collections maintaining the rules separately from console was another big task itself.
As I mentioned we moved heavily to firebase function to maintain the data sanity but that doesn't solve the main problem. It was like maintaining another api server itself.