Why can Tokens never be immortal, but AppRole Secrets can?

I get the first level of “if someone gets your immortal token, then they have access forever” but that just shifts it one level to “if someone gets your immortal secret, then they can issue tokens forever”.

What is the use of this extra layer?