...
[SCG 2007] Guideline 6-3 Safely invoke standard APIs that perform tasks using the immediate caller's class loader instance
...
VOID SEC50-J. Do not expose standard APIs that may bypass Security Manager checks to untrusted code 09. Platform Security (SEC) SEC52SEC54-JJG. Do not use APIs that perform access checks against the immediate caller