Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already flag destructiveHint=true, readOnlyHint=false, idempotentHint=false, and openWorldHint=true, so the safety profile is covered structurally. The description adds real value on top: it says exactly which capabilities are revoked (agent control, navigation protection), that debug collection stops, and that site permissions survive. It does not state whether the release is reversible or how to re-acquire control, which keeps it below a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.