Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover the safety profile (readOnly, non-destructive, closed-world), and the description adds non-obvious behavior: plan-disallowed options render locked, the password is typed into the panel and never transits the chat, and the saved result is reported back afterwards. These are things an agent could not infer from annotations or schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.