MCP doesn't expose service credentials to the AI.

I definitely think that's a bridge to gap, but MCP is not the answer. OSes currently lack the tools to do this properly, but I hope they will improve. Agents need more granular sandboxing in all areas.