The security model and runtime requirements are completely different between making an HTTP request and executing arbitrary code.

They have different tradeoffs.

You nailed it! There are established tools that handle the security model. MCP is the 5th leg.