Bearer tokens lack cryptographic binding and signature
8OAuth 2.0 removed signature-based security in favor of relying solely on TLS. Bearer tokens are not cryptographically bound to clients, making them inherently less secure if TLS is compromised.
securityOAuth 2.0TLS