Obtain user_metadata from access_token: Not using rules

I have tried to request profile from /tokeninfo endpoint and it gives the user_metadata information, why is this? And could I use it instead of requesting /userinfo endpoint?