Eventhough the method would be protected by package.access restriction, there is not much sharing advantage in having the method expose as public. On the other hand, we should make the method with priviledge protected or private to be security tight.