Is Using A Pendingintent For Receiving Location Updates A Security Risk?

In Reto Meiers blog post A Deep Dive Into Location on the Android Blog, and in his talk, he recommends using a PendingIntent for receiving updates from the LocationManager. Since y

Solution 1:

Have a receiver registered in the manifest receive the PendingIntent - enable and disable as needed via PackageManager - specify no intent filters - the receiver will be implicitly android:exported=false, so no one but your app will be able to wake him up. Also setComponent() on the intent you pass into PendingIntent to be handled by your receiver only