Ah, that makes sense, for the case of losing control of (e.g., accidentally committing) the git connection credentials: better to just revoke a token than rotate the password after having potentially also lost control of whatever else uses the same password.
Yup, and when you create a token they advise to give it an expiration date, just in case it ends up somewhere down the road.