I guess what I mean is, if a backend or contrib module is using a class, it's public almost by definition