Comment by austin-cheney

While that can certainly be true it is still generally safer than username/password for authentication.