I'd use STP on each edge switch's edge ports (so not facing back towards the MLAG peers), with edge-safeguard and BPDU-restrict or whatever the equivalent is on your edge switches.
The key is that we want the edge switches to transmit BPDUs out the edge ports and block whenever they receive a BPDU on an edge port. This way, if Edge2 gets looped in to Edge3, they will see each other's BPDUs and block the ports.