Not more power in the sense of greater access but nonetheless gaining persistence is a huge advantage for an attacker.

In the case of bearer tokens there are many cases where attackers have managed to steal them without achieving full device compromise. Since it's literally sending the key in plaintext (horribly insecure) all it takes is tricking the client software into sending the header to the wrong place a single time.