Returning a readonly collection does not add any benefit because a defensive copy is already used.