(THIS CODING RULE OR GUIDELINE IS UNDER CONSTRUCTION)

A malicious application may send an intent to an exported component that is not expecting to receive an intent from that application. This may trick the receiving application into taking some inappropriate action with undesirable results. In particular, if the component is not meant to be public but is nonetheless exported then such an attack may be possible.

...