...
Override methods only when necessary. Declare methods and fields final whenever possible to avoid malicious subclassing. When methods and fields cannot be declared final, refrain from increasing the accessibility of overridden methods. (See guideline rule SEC01-J. Minimize the accessibility of classes and their members.)
...
Search for vulnerabilities resulting from the violation of this guideline rule on the CERT website.
Related Guidelines
...