Comment by simonw

My point about MCPs here is that they provide a way to make those secrets and API keys deterministically inaccessible to the agents - even agents that's have a shell execution environment.

That's the opposite of a false sense of security.