They're still in beta, but it is possible to switch to fine grained access tokens. It is also possible to disallow classic access tokens.