Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare a non-read-only, open-world, non-destructive operation, and the description adds real context on top: a visible browser window is launched (interactive, user-facing side effect) and auth state is persisted to disk for later reuse. It stops short of saying whether the call blocks until login completes, what happens on timeout/cancel, or where the state is stored.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.