Third party developers have access to the same APIs that COSMIC applets and applications use. It's not possible for a crate to prevent use of public APIs based on who is importing the crate.