Not allowing long-lived, powerful tokens is so basic that I'm skeptical they did very much right.