The internet permission never meaningfully protected anything on stock android since you could always just send an intent to the browser with the payload stored in the GET parameters.