Depends on your usecase. On a device it's harder to steal a token, especially on iOS when you put all that stuff in the secured enclave. Fortify that with cert

Depends on your usecase. On a device it's harder to steal a token, especially on iOS when you put all that stuff in the secured enclave. Fortify that with certificate pinning on your application and it suddenly becomes REALLY hard to intercept traffic.