Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint=true; the description goes well beyond that by disclosing that the payload contains plaintext phone/WeChat/email restricted to the owner, that sensitive ID-document questions are never remembered, and that file answers expose only a filename with no storage address. It stops short of describing pagination, field completeness, or what an empty profile looks like, which keeps it from a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.