Should be "must be assumed not thread-safe". We can also add wording if implementations are allowed to be thread-safe, but it seems unnecessary right now.