Java platform imports not limited to declared dependencies

[Jesse Glick]

As of my build of Jan 27, given

---%<--- src/org/hello/Main.java
package org.hello;
public class Main {
     public static void main(String[] args) {
         System.out.println(javax.xml.parsers.SAXParserFactory.newInstance());
     }
}
---%<--- src/module-info.java
module org.hello @ 1 {
     requires jdk.base;
     class org.hello.Main;
}
---%<---

if I run

$ mkdir classes && javac -d classes src/org/hello/Main.java src/module-info.java

it succeeds without complaint. My understanding was that this should be rejected unless I also said "requires jdk.jaxp;". Am I missing something?