I would tend to prefer `_` over `__`. `__` does name mangling, which prevents overrides using inheritance, and is generally just more stringent than we need. `_` marks attributes as internal by convention.