ServiceReference.isAssignableTo() allows any bundle to get access to unexported services from any other bundle

I was investigating some code that does a call similar to:

bundleContext.getService(bundleContext.getServiceReference("anyClassYouWant"));

where anyClassYouWant is indeed a service provided by a different bundle than the caller, but not exported. Therefore, there is no wire in between the two. The requester seems to get the service without any issue. This seems to boil down to this [0] commit, where the thrown exception gets ignored.

[0]  - https://github.com/apache/felix-dev/commit/fd69ad6b9fd510588d858e4e06a31dee1fb59199