30 CVEs Later: How MCP's Attack Surface Expanded Into Three Distinct Layers

· Dev.to