You are correct that it is possible to use MCP securely. Like if you build a custom client, and only use trusted third party servers one at a time.

But the hype-promise of "AI" is that you can make the commercial off the shelf ClaudeGPT client magically discover MCP servers and automate everything. And if the majority of people's expectations require vulnerability, you're going to have a bad time.