Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full load and does so well: it discloses read-only behavior ('cannot register, post, buy, execute, or change an exchange'), exclusion rules for hidden/suspended/synthetic records, and the untrusted-data / prompt-injection warning. It also clarifies implicitly that only already-public records are reachable, which bounds failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.