I was told JWTs are insecure

I get that if you store the token in localStorage a malicious script can read it, but don't we have this problem no matter what we use?

Submitted September 20, 2018 at 06:43PM by penguingspe