Starting with a design isn't a new idea but having a "design-first" approach to Application Programming Interfaces (API) is.

To improve security, an administrator can block all third-party API app access to Workspace data, but more targeted methods may be better overall.