Idk if that's not too much of an oversimplification, maybe more like JWTs are an indicator/enabler of architecture level bugs?