Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the full burden; it does disclose 'Read-only' and the scope of data included, which is genuinely useful. It says nothing about permissions, error behavior for a missing id, or how far the event/conversation expansion goes, so the safety profile is only partially covered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.