The underlying issue is always relying on a third party, on openrouter you're trusting the end model provider to not do funny business

can't really fix this

If you're paying said third party it's a decent mitigation.

maybe said third party could just run / veto most basic mcp servers so youcan run them on their server with some peace of mind

interesting

I don't see how they could ever be trust worthy without kneecaping the claimed benefits.

Docker is doing this.