The boundary remains

Near or far, the model still does not own the connection.

The host chooses which servers to connect. The server defines what it exposes. The client carries messages. Permission checks can stop a request before the server performs it.

MCP creates a path. The surrounding application must still decide how that path may be used.