If you don't understand and verify the scope of authorities a bearer token grants, then you are just begging for a security breach.