They don't need access to global scope, they just need to craft an inter-app comms API message with an action name corresponding to a method they're not supposed to call, like (like init, provider, or browse).

This is probably mitigated by the fact we currently only listen to 'search' messages from the system app, but it just seemed a bit dodgy that's all.