Model Context Protocol has prompt injection security problemssimonwillison.net6 pointssimonwa year ago