This is exactly it. I have seen app developers who were "caught" by this use the same explanation. There is a new API that can be used instead that does not trigger the notification (and does not disclose the clipboard content)