I have a straightforward REST API callout in apex.
HttpResponse response = http.send(request);
However, I naturally do not want to hardcode the bearer token, and am looking for ways to securely store it in Salesforce. Multiple sources I've looked at (here, here, and here) suggest using Named Credentials. However, everything I've seen regarding Named Credentials seems to indicate that it is a solution for much more complex integrations than what I am trying to do. The JWT and OAuth authentication options include numerous fields I'm not familiar with at this time, and seem to be more based around creating an ongoing app than handling a simple callout.
This question/answer is very similar to mine, but the accepted (and only) answer suggests storing the bearer token in a custom object, which as mentioned in this question seems like an unideal solution. Custom Settings or Custom Metadata Types are both options as well, but don't seem to be designed with security in mind.
Does securely storing just a bearer token in Salesforce merit using Named Credentials? If so, can one be configured in a way that only references the bearer token? If not, what are secure alternatives?