I think we are in agreement with your statement, up until the second part of it.

Like i said, its a best practice to run MCP servers, etc with their own user account and access and not with your own account.

The moment you ran your app with your own credentials you exactly granted it permission to everything you can access include ~/.ssh