I don't think so, JWT is secure, but it is at the same timeless secure than session-based authentication. For example, the JWT is more vulnerable to hackers and has to be designed to prevent hackers. An unexpired JWT can become a security risk. You are also trusting the token signature cannot be compromised. To prevent the token from unexpired you have to refresh the token.