In the comments here there are basically two schools of thought illustrated:

1. This is how MCP and LLMs work. This is how non-deterministic systems turn out. You wanted agentic AI. This is a natural outcome. What’s the problem?

2. We can design these systems to be useful and secure, but it will always be a game of whack-a-mole just like it is now, so what’s the problem?

What I’d like to see more of is a third school of thought:

3. How can anyone be so laissez-faire about folks using systems that are designed to be insecure? We should shut this down now, and let our sense guide our progress, instead of promises of VC-funded exits and promises of billions.