It's like 2010 all over again: People would put api.domain.com up and no auth - great times for builders..and ill-intentioned folks!
Yeah... and even 1995! When I experimented with MCP servers via stdin/stdout, I felt projected back in time in the good-old CGI scripts era.
The browser extension native app integrations also communicate via stdin/stdout. It’s still out there!