[N] Shopify Developers on the Security Mistakes That Put Stores at Risk (and How to Fix Them)

What is the most common security mistake you see on Shopify stores or apps, and how should a merchant or developer fix it?