...
This does not prevent malicious subclasses, but does protect the data in SensitiveClass. Its methods are protected by being declared final. for more info on how to handle malicious subclasses, see OBJ10-J. Provide mutable classes with copy functionality to allow passing instances to untrusted code safely.
...