@galderz You're only partially right: for once, it's not TestNG's fault :)
I looked at a compiled Scala class and the protected methods are actually "public" in the class file.