Prevent exposing access to a field that we're careful to modify under lock. Again, a defensive copy is a suitable alternative, but seems unneeded.