Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With only destructiveHint=false in annotations, the description carries rich behavioral context: admin permission required, org admin is notified, hard rate limits, temporary/non-transferable authorization scope (不跨活动/申请人/重入), and no audience expansion, invitation, or contact disclosure. This is exactly the extra context that annotations do not provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.