This is pretty standard for specification documents, probably more accurate to say AI sounds like them than the other way around.

Ignoring the particular technologies used (OAuth/JWT) it looks like they’re adding more auth to the devices themselves; think two computers connected to the same network switch not being able to impersonate each other.