How would you design an API for a financial application like TurboTax that integrates with external services, ensuring both performance and security?