“"Stealth mode" MCPs exist that use information local to a user's computer to interact with apps like Slack, bypassing the need for official company IT approval.”