Generally there is a big overlap between attack scenarios that allow for token exfiltration and attack scenarios that allow for code injection. Someone doesn't

Generally there is a big overlap between attack scenarios that allow for token exfiltration and attack scenarios that allow for code injection. Someone doesn't need to exfiltrate a token to make the client do their malicious requests right on the user's device. And certain external mitigations, like anomalous API usage detection, won't see odd time-of-travel restrictions based on the estimated geolocations of two different IP addresses or a change in the user agent behavior (different user-agent header, different networking stack behavior, etc). The difference is that some people argue that one of them is in scope for security measures, while the other is out of scope.