if you are using TwitchID’s in your extension the JWT tells you “this is definetly this person”
So up to you