A product security engineer reviewing a proposed integration with a third-party API (payment processor, data enrichment service, HR system, identity provider) needs to assess the security of the integration design — covering authentication, data exposure, transport security, error handling, and the blast radius of a third-party compromise — before the integration is approved for production.