You might say "well if the user is confirming each MCP tool action like they should, these shouldn't be a problem", but it's a bit tricky