By Using Implicit Intents
you have not specified a component, It means the component will be chosen by Android
by given Intent-Action
.
Using android:exported="false"
will make sure that, other can not start your service. But what if I wrote an application with BroadcastReeciver
which listens your Intent-Action
and do some malicious work?
And same would happen when I declared a Service into my application and use the same category/ filter/ action.
So use Explicit Intents
.