There's a lot of confusion around MCP security. This Wiz brief is the most accurate I've found thus far.