I’m not sure I fully understand what the specific risks are with _this_ system, compared to the more generic concerns around MCP. Could you clarify what new threats it introduces?

Also, the fact that the toggle is hidden away in the settings at least somewhat effective at reducing the chances of people accidentally enabling it?

The difference is probably just the vastly more main stream audience of ChatGPT. Also I'm not particularly concerned about this vs any other security issue the average person has.