For starts, those aren't "app names". They're URL schemes. I assume that your dev team has gleaned the URL scheme for each of the apps above, or have they just plugged in the app names in hopes that the app name happens to match the app's URL scheme? It's difficult to know for sure since they are already conflating "app name" with "url scheme", which are two vastly different things.
In any case, it seems likely that the offending app has registered one of the above "app names" as their URL scheme, which is why canOpenURL() is returning true.