Most Shopify VA horror stories are permissions failures, not people failures. A least-privilege staff permission set from Shopify’s own docs, the three highest-consequence mistakes and their controls, and onboarding and offboarding checklists built for a live store.