Passing Global Data MY_Controller Safe?

You don't need the underscore at the beginning of the method name if it's protected, unless that's part of your project's coding style guidelines.

Bonfire

Practical CodeIgniter 3
CodeIgniter Testing Guide