[Rygian]

A human should defintely be doing that.

By "that" it is understood: enforcing that the code cleans up unsafe inputs before processing them.

If there is no human doing that enforcement, the code has no chance of being secure.

[conartist6]

Why! Do you use your eyeballs to spot SQL injection? Or do you maybe use a tool? A linter perhaps?

[Rygian]

I develop my code defensively, and I argue that the developers of MCP servers need to develop their code defensively too.

Not sure what it is that you intend to argue.