Access tokens are short lived and can easily be revoked (when opaque).

Sending your service credentials to every service is arguably less secure since they can have lesser security or log unwanted things.