[Android] Custom app permission

This is a suggestion. I noticed that in car entertainment system using the Android system, some applications define a signature permission through the "permission" tag, but do not use it to protect any exported components, that is, use "android:permission" in the component. Is this also a problem that can be written as a rule?

```xml

```