This is not true by default. There are plenty of poorly implemented MCP servers which do that. The MCP spec supports Oauth and intends to avoid that but it is not enforced.