in this case, people are arguing it's a MITM attack, obscured by the MCP