Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. 'Never secrets' is a genuinely useful guarantee about what the response excludes, but nothing is said about whether this is a read-only operation, what the connection state values look like, whether the 'safe browser link' is always present or only in some states, or whether the call has side effects. This is a significant gap for the only available source of behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.