That's roughly the intent — isolating the bearer fallback path against an L402-only client tells you exactly where auth negotiation breaks down or adds latency. The risk side worth watching: bearer tokens in that path have no payment context, so you lose the metering guarantees L402 gives you. Keeping the fallback narrow and well-logged matters.