Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does most of it: syncing stops, tokens and settings are deleted, and reconnecting requires OAuth again — all material consequences for a destructive action. It stops short of stating what happens to already-synced CRM data or any permission/admin requirement, which is why it is not a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.