The only pending intents that were not explicit were the four from the NotificationHelper class. These now explicitly specify the NotificationBroadcastReceiver as their destination, which is not exported. That then forwards the intents onto relevant methods of AppUpdateStatusManager.