Agents are collapsing their tool catalogues into a single exec tool and writing code against your APIs. Having built an MCP server with 30+ tools for Calendrz, I think that makes your tool design more important, not less, and privacy has to live in the tools.