Put security ahead of backwards compatibility by offering clear upgrade paths, publishing the adoption of safer features and protocols, announcing deprecation of unsafe features (possibly inside the product) and making upgrades seamless enough that customers keep current; customers should be pushed firmly along paths that lower their risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.