...
Neither the original array values nor the public list can be modified by a client. For more details about unmodifiable wrappers, refer to guideline "void SEC14-J. Provide sensitive mutable classes with unmodifiable wrappers." This solution still applies if the array contains mutable items instead of String.
...