Here and for other domain objects: why not `protected`? Is this class never intended to be subclassed?