I don’t know that I care if anyone can see the issue today or not. Specifically in this example, one app should not be able to influence the behavior of another

I don’t know that I care if anyone can see the issue today or not. Specifically in this example, one app should not be able to influence the behavior of another app outside of normal channels just because the phone mfg made the app. Backdoors, exploits, and all manner of existing CVEs exist because of mfg shortcuts, and we should be learning lessons even if the threat model isn’t immediately apparent.