MCP is convenient and the context pollution issue is easily solved by running them in subagents. The real miss here was not doing that from the start.

Well, stdio security issues when not sandboxed are another huge miss, although that's a bit of a derail.