Operator obligations under Popia have reshaped how the channel approaches client security and compliance.