Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
readOnlyHint=true already tells the agent this is a safe, non-mutating read, so the description needn't re-litigate safety. It adds the underlying endpoint (POST /v1/rex/UserProfile/read) and the field set, but says nothing about what happens if no account is signed in, auth failure modes, or whether the response is cached.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.