> Applications could be exposing intents they assume will be used by trustworthy applications (i.e. apps in the Play Store). This is a poor assumption to make.

> Applications could be exposing intents they assume will be used by trustworthy applications (i.e. apps in the Play Store). This is a poor assumption to make. Any data coming into your application should be assumed to be malicious. This would be the same as a server just accepting any data made to its API calls without any validation.