The argument is that anyone malicious can name his package the same as yours and access package protected things, but who cares about that?