Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnly/non-destructive/closed-world, and the description adds genuinely new behavioral facts: it is metadata only, no invocation occurs, and the response reports whether encrypted invocation preparation, read-only execution, and a consumer pilot session are required. That is useful pre-flight information beyond the structured fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.