MCP Apps introduce real UI surfaces into chat-based tool responses, but the silent degradation behavior and host-visible iframe content mean teams that ignore the text-response contract or put secrets in forms risk tools that break invisibly or expose sensitive data.