...
Additionally, an object's state may get corrupted if it returns references to internal mutable components. Accessors must consequently return defensive copies of internal mutable objects. (OBJ37OBJ11-J. Defensively copy private mutable class members before returning their references)
...