Android apps routinely use a loophole to get the list of all other apps