Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare non-readonly, idempotent, non-destructive. The description adds real behavioral value beyond them: the failed-restore condition ('only an expense they deleted themselves comes back') and the ownership constraint, which the agent needs to predict outcomes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.