TBH this article looks like half AI slop to me. What’s “GPT researcher”? (edit: for some reason I missed the sentence explaining what it is, my had. My view doesn’t change anyway. )

Also, by their logic, a terminal can run “rm -rf /”, is this terminal vulnerable? Even more irony, in their report, they said GitHub is not vulnerable. Doesn’t this exactly mean it’s not the responsibility of MCP?

MCP is basically a protocol for payloads, it’s just like protobuf/JSON but for AI. Can we say MCP is vulnerable simply because it can carry malicious payloads?

You can.

Open a publisher page, then in the top right corner, look for a gear icon. Click it, and there’s an option to ignore this publisher.

Unfortunately there’s a limitation. This works only for those having a dedicated publisher page. For publishers without a dedicated page, Steam will fallback to the search page, which doesn’t provide a way to ignore this publisher.