The Guardrail Gap — MCP Filesystem Leaks, a Copilot RCE, and Agent Guards That Miss Non-English Attacks