This information refers to SuiteCommerce or the Mont Blanc release of SuiteCommerce Advanced or later.
Commerce web stores let you restrict access to your website in two ways:
Both options are disabled by default and require some minor configuration to function.
The Search API is public and contains all the information exposed by the fieldset being used. Enabling password protection restricts users from accessing some or all of your site. However, a user who knows a URL that calls the Search API could access some of this information.