Agencies should not permit remote privileged access originating from an untrusted domain, and that includes signing in as an ordinary user and then elevating privileges.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.