Chasing Shadows: Securing APIs in a Digital Economy