I find that a claim like

> Paseto is everything you love about JOSE (JWT, JWE, JWS) without any of the many design deficits that plague the JOSE standards.

Needs to be substantiated. Where's the comparison? There's only a link to a website and presentation talking about the downsides of JOSE, but the only one i see for JWT is poor implementations failing when the algorithm supplied client-side is invalid. That's a trivial bug and hopefully long since fixed. Is that it?