Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so well: it declares the login requirement, that deletion removes the storage object and is unrecoverable, and the permission model by role. It also documents the two-step preview/confirm safeguard via previewHash. It stops short of describing pacing, limits, or what the preview response contains beyond 'activity, exact file, visibility'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.