Always good to be paranoid.

Even MCPs are not safe. For example Notion injected ads [1] to its official MCP connector to advertise products mid-task.

[1]: https://old.reddit.com/r/ClaudeAI/comments/1w9dluw/notions_o...

MCP is SOAP-XML without the contract or formal language, it's hilarious

it's the same tradeoff between :

- rigidity vs flexibility

- determinism vs creativity

- conservative vs liberal

- right vs left

if you know exactly what you want and how to describe it, use SOAP-XML/REST etc.

if you don't know exactly what you want or how to describe it, use LLM/MCP

Nothing new under the sun

Whoever came up with that brilliant idea is probably paid twice what I am