But you don't have to give it everything or nothing. You can just scope the token you give the MCP to the things you want it to access. Even in this instance i

But you don't have to give it everything or nothing. You can just scope the token you give the MCP to the things you want it to access. Even in this instance if they just gave the MCP a token that only had access to this repo (an entirely possible thing to do) it wouldn't have been able to do what it did.