OX Security says a flaw in Anthropic's MCP protocol exposes 200,000 servers to command execution, and Anthropic declined to patch the root cause.