Why MCPs and Cursor make it trivial to hack your code