...
If a method modifies a static field, you must synchronize access to this field, even if the method is typically used only by a single thread. It is not possible for clients to perform external synchronization on such a method because there can be no guarantee that unrelated clients will do likewise.
Documenting Documented design intent is irrelevant when dealing with untrusted code because an attacker can always chose to ignore the documentation.
...