A team assumes MCP support automatically makes every connected tool safe. What should an architect clarify?

1. MCP certifies every generated argument as correct
2. MCP replaces all database user privileges
3. MCP standardizes interaction; individual tools still require authorization, validation, and risk controls
4. MCP guarantees every tool is read-only