Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations establish the safety profile (readOnlyHint=false, destructiveHint=false, openWorldHint=false), so the burden is reduced. The description still adds genuinely non-obvious behavior: unlocking triggers a user-facing dialog and the passphrase never flows through the agent, which changes how an agent should sequence and narrate the call. It stops short of covering cancel/failure behavior or whether the call blocks.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.