Exposing data object to client code can cause client to be tied to this particular serialization implementation (Marshall), and that is not good.