That's scanning for private APIs, not scanning for malicious behavior. Use of private APIs is not inherently malicious and the security framework can not rely o

That's scanning for private APIs, not scanning for malicious behavior. Use of private APIs is not inherently malicious and the security framework can not rely on private APIs not being used.