Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden, and it only discloses that the store is private and encrypted. It does not say whether matching is semantic or keyword, whether results come back decrypted in plaintext, whether there is a result cap or pagination, or what access/prerequisites are needed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.