What is an implicit Intent data leak and how does a malicious app intercept sensitive data from one?

• A.B) Implicit Intents are encrypted by the OS before being broadcast; no third-party app can read their contents.
• B.A) An implicit Intent (ACTION_SEND, ACTION_VIEW with a MIME type) does not specify a target component; the OS shows an app chooser, and any installed app that declares a matching intent filter can receive it. A malicious app registering a generic intent filter (ACTION_SEND, type="text/plain") can appear in the chooser and receive sensitive data (documents, passwords, authentication tokens) sent by the victim app.
• C.C) Implicit Intents are only delivered to the app with the highest intent filter priority; a malicious app cannot intercept them without the highest priority declaration.
• D.D) Implicit Intents for data sharing require the SEND_DATA permission; apps without this permission cannot receive shared data.