Interesting that this is being framed as an Uber transgression when Apple should take the rap for even creating this permission in the first place.
Then apple forgot to remove the premission after it was obsolete. (Either apple created an alternative method that had no security issues, or Uber had more time to create a implementation that rendered the map on the watch.)
Other apps were not given access.
This way, only apps signed with the appropriate entitlements (usually system apps) can run those calls...
Still, Uber could detect when your phone is on the table and quickly take screenshots. This is very prone to abuse, some log should be available for auditing.
Maybe, but then the user should explictly authorize it AND it should be optional, if this is not the case, then it should not exist.
In any case, it does sound a bit shady that such permission exists at all and - according to the article - Apple "can decide" who can use it.
It seems like there are "class A" and "class B" developers rated by Apple and given (or denied) this "permission".