Also, the skills can be ignored or thwarted if the LLM feels like, while a policy at the MCP server level stays there.