The extension ships as standard ocmod packaging with no core-file modifications, so it installs and uninstalls like any well-behaved OpenCart extension. API access is scoped to its own client credentials, secrets are stored hashed, and revoking the client in your admin cuts access instantly.
Sellers burned by messy extensions elsewhere can read what a clean integration looks like before installing anything, including ours.