Previously, the checker was using the nullability of the expression, which is nonnull IFF both receiver and method are annotated as _Nonnull. However, the receiver could be known to the analyzer to be nonnull without being explicitly marked as _Nonnull.
rdar://40635584
We usually skip private: at the top of class because it's implied, but in this case i think it's actually justified.