Most MCP Security Problems Have Nothing To Do With Authentication

When teams start deploying MCP servers, the first security conversation is usually about authentication. OAuth. API keys. SSO. Identity providers. All important. But after looking at real MCP deployme