Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=false, so the safety baseline is covered; the description goes well beyond that by disclosing that the identifier is never reused, that restore returns the lesson with its links and versions intact, and that an elevated permission is required. These are exactly the consequence/permission details an agent needs before invoking a destructive call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.