Ugh, that's a new low. I can't think of a single good reason a lighting app would need shopify api access.

That said, I've done some consulting work on shopify stores, and I wouldn't be shocked at all to see something like that at all. The bar for code quality that a lot of low end consultants/designers deliver is just abysmal.