How is this "developer mode" different than just connecting the MCP normally and prompt injecting it to use the same tools?

It's no different. This just brings that unsafe anti-pattern to the ChatGPT consumer app itself - albeit hidden behind an option with a scary name that might hopefully discourage many users who don't understand the consequences from turning it on.