What IMPORTDATA actually does (and where it stops)
IMPORTDATA is a spreadsheet formula: you put =IMPORTDATA("https://example.com/file.csv") in a cell and Sheets fetches the URL, parses the response as comma- or tab-separated text, and tiles the result into adjacent cells. It refreshes automatically on a schedule Google controls, roughly every hour, though in practice the interval is inconsistent and you cannot force it on demand without deleting and re-entering the formula.
The hard limits: no request headers, so any endpoint requiring an Authorization or X-Api-Key header simply returns a 401 and the cell shows a loading error with no explanation. No error handling — a 4xx, a timeout, or a malformed response all produce the same opaque #ERROR! in the cell. And the data must be parseable as flat CSV or TSV; JSON responses are not supported at all.
For a truly public CSV that updates infrequently and where silent staleness is acceptable, IMPORTDATA is fine. The first time I used it against an internal endpoint I spent 20 minutes wondering why the formula kept erroring before remembering headers aren't a thing it can do.