If you process less than 10k requests per second, you’re not Google nor are you Facebook.

— Henryk Plötz in Should I Use JWTs For Authentication Tokens? - Tinker, Tamper, Alter, Fry