ragarding to the unverified mcp concerns, this is the same reason i chose OCI.

i chose OCI format for plugin packaging in my hyper-mcp project in order to leverage all the security measurements we have with OCI like image signing, image verification etc...

i chose wasm to sandbox each plugin so that they have no network or filesystem access by default

https://github.com/tuananh/hyper-mcp