MCP is only transport protocol here.

And you need tools to connect to external "systems", the context "pollution" can be managed easily. Also even if you don't use MCP you need to use tools and they need to expose their schema to the AI model.

I feel the MCP hype over bad security got a lot confused and very defensive over MCP or more globally tools use.