That's a great point. As a dev, lots of times you're working with an auth provider, either from a social login like Google or from a centrally managed service.

In either case, you can suggest "let's use <X> token" where X is paseto or something else, but you can't dictate it (Google certainly won't listen and change formats :) ).