Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey mutation, idempotency, and destructiveness, so the bar for added value is lower. The description adds meaningful behavior: read-only files can still be read, enforcement happens at the proxy layer, and it applies regardless of Drive permissions. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.