How difficult is it to hack a token?

Tokens are not derived from the data in any way, so “hacking” a token does not reveal any information through unauthorized access. Any information derived from the attempted hack of a token is meaningless.