That was a bit of surprise as well. Wonder if it was intentional or if Android got lucky by making a protocol decision with unintended positive security consequences.