Unlike Chrome's SandboxedProcessServices, access to WebApkSandboxedProcessService is not protected by a signature permission. This means that any app can bind to a running WebApkSandboxedProcessService and call IChildProcessService#crashIntentionallyForTesting
Comment 1 by pkotw...@chromium.org
, Jul 3 2016