Agreed, this will be an arms race;
But it need not have to be, WebMCP can (should?) respect website's choice;
Then someone will just make a tool that doesn’t respect it, so what’s the point