Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent annotations, the description discloses the login requirement, that contacts are withheld by default, that contacts are returned only when the request is ACCEPTED and currently visible, and that login phone/profile contact data is never returned. These privacy, consent and status-conditional behaviors are exactly the extra context an agent cannot get from annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.