Does the Sync Made Easy integration function via REST API? Is it capable of transferring the PCI-compliant security standards Shopify has outgoing at REST?

Yes, Sync Made Easy app utilizes the REST API which follows PCI-compliant security standards. Moreover, the app also uses sha-1 encryption in order to not reveal the access token.