How is it not a responsibility of the MCP provider to ensure that they don't leak the data they are entrusted with? They should know how any app that will interface with their MCP can work and lock down any unauthorized access, otherwise it's not really a database provider is it? I mean, if it can't meet that bar, why pay for it?