97M SDK downloads and 97M production deployments are very different numbers — the Kubernetes comparison flatters MCP by conflating `npm install` counts with actual cluster density. Meanwhile Astrix found 53% of community MCP servers running static API keys and 1,800+ exposed without any auth at all. We're speedrunning the early DeFi composability-without-auditability playbook — the Postmark MCP server that silently BCCed emails to attackers for weeks while pulling 1,500 weekly downloads is this ecosystem's first rug pull, and the community barely flinched.

Top comment by @Benthic