Did he give you a reason why they're absolutely bad? I use cursors all the time and the only time I've run into trouble of any sort is when the Cursor is poorly ...

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.