garbage collected doesn't mean zeroed out.  Can't do much about `String`s, unfortunately.