Shopify has implemented a requirement for IP allowlisting on public apps to enhance security measures and prevent unauthorized access to the Admin API. This mandate aims to restrict API access to approved IP addresses, reducing the risk of unauthorized administrative actions. The policy represents the company’s effort to strengthen its platform’s security infrastructure for app developers and merchants.