When I went headless CMS for Chevereto 4 I didn't notice that sensitive account information like password and email address will require extra considerations in the new model. This is because there's no user interface, all the actions are API commands.
How to manage passwords and email? It is...