disclaimer: I work for Shopify as a lead on our "corporate security engineering" team (not real name of it). Shopify follows the the zero trust networking/Beyo

disclaimer: I work for Shopify as a lead on our "corporate security engineering" team (not real name of it). Shopify follows the the zero trust networking/Beyondcorp model, and we never had the physical office spaces as part of our threat model. Not much can be done for shoulder-surfing (aside from privacy screens, and our security training), however we have built out robust systems that build trust modeling out of identity and device security.