Broad MCP access, underspecified prompts, and unconstrained autonomy wipes data, breaks systems, and gets people fired.