We could include some metadata in data records to help us identify where data came from and who owns it, to help us avoid situations where org 1's data ends up on org 2's site.
For example, when creating customers in a Shopify shop, we could allow for some optional metadata to be included in the payload, such as the source of the customer data, and if the source belongs to a different org than the Shopify shop, we throw an error.