MCP focuses on transport and managing context and doesn't absolve the user for sensibly implementing the interface (i.e. defining a schema and doing schema validation)

this is like saying "HTTP doesn't do json validation", which, well, yeah.