You did not understand, the developer does not need to extend `Rbac\Identity\Identity`.

ZfcRbac will call `$user->getRoles()` and get an array of strings, ok? Then ZfcRbac will create a **new** plain instance of `Identity` class, and assign the roles to it.

The `$user` state is not changed.