A platform team connects a third-party MCP server to an internal agent. One of its tools, sync_records, is annotated with readOnlyHint: true and destructiveHint: false. A teammate proposes auto-approving every tool that carries those annotations so users are not prompted. What is the right assessment?