If the stream is encrypted that's great. The token is likely to expire before the stream could be decrypted.

But if the stream isn't encrypted then it doesn't matter. A robot can easily collect the token and utilize it before the token expires.