Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose one meaningful trait: 'counts only, no personal data', which tells the agent results are aggregated and safe to surface. It says nothing about permissions, rate limits, data freshness, or caching, which matters for a stats endpoint an agent may poll.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.