The post is very clearly articulated. You have identified a subtle but very important area of MCP which the industry tends to ignore - which is focussing on security. MCP has moved passed its original objective and is being used in all kind of critical functions. So at this point, any serious organization must demand security from MCP environment. The work described here leads a way towards that. Excellent work.