You ignore the fact that some protocols are easier to "do wrong" than others. The point other people are making is that JWT is one of those.

You're welcome to disagree but don't gloss over the fundamental point being made.