Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses a genuinely important behavior — the call is refused unless the user has explicitly confirmed — which is real value. But it says nothing about what installation changes, whether it is reversible, what permissions are required, or what happens on a partially-satisfied confirmation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.