I'm currently building an app that only uses the permission for internet access, but it's also using basic functionalities of the OS for managing specific types of public files that might be on the SDCard or not depending on the device, in my case it's pictures through the Media ContentProvider.

I'm guessing the exploit in the article is pushing this method to the next level.