Its popular now because its showing up in tools people use so more backends are releasing MCP servers to access them, most are free so doubt its more than just a new fancy tool that people are excited about.

As for authentication most are locally run, or run on generic data like running a nodejs server mcp would be used locally by a team not exposed on the internet so access restrictions arent really needed