Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations and no output schema, the description carries the disclosure burden and does describe the return shape (identity fields or null), which is genuinely useful. It does not cover sensitivity/permissions of returning personal data or any other behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.