The article goes beyond and warn about jailing MCP servers independently of the agent itself (which also deserves to be jailed).