Why would the mint allow that/issue such an access token??

It would bypass their very own security rule, in that only users who signed up for their mint should be able to use that mint.

Reply to this note

Please Login to reply.

Discussion

it can't be prevented

Sure.

- Short lived tokens

- ban auth attempts from the same token from different IP

+2FA