An AppWidgetProvider needs to be exported, so that the core OS process that coordinates app widgets (between hosts and providers) can talk to it. Hence, android:exported="false" is inapropos.
To be honest, I would have expected nothing to work with the provider, rather than only some events.