> Also, MCP is better for restricted environments because you know exactly what it can or cannot do.

The continuous exploits of MCP despite limited adoption really makes this seem wrong.