MCP security tracks API's playbook – we know how that ends