That contact and messages access exploit is quite neat. Some might say it even looks straightforward. I can only assume this is the "private API" that darkly patterned apps use, because it looks that obvious.