A design choice in the MCP SDKs allows remote code execution across the AI supply chain.