Class-level __nullable wasn't reliable against ocasional instance update