synchronizing on a non final field is not secure