Why I stopped pasting production JWTs into random websites (and built an offline tool suite instead)

Be honest: how many times this week have you pasted a bearer token, a customer payload, or an .env...