Azure MCP exploited: Maliciously leaking user's KeyVault secrets to attackers

Shouldn’t these ‘malicious’ prompts be part of testing? If we are allowing scripts to be executed through prompts, shouldn’t there be more checks and balances?

“Don’t trust user input” “Validate user input” “Sanitize user input” mantras ring in my head.

Why weren’t they ringing in those developers heads? Or were they vibe coding??

Tongue firmly in cheek - or may be not.