...
Automated detection of non-private nested classes that define non-private members and constructors is straightforward. However, this guideline rule applies only when those classes could potentially expose sensitive data or operations from the outer class. Detection of sensitive data or operations requires programmer assistance.
...