Should return a defensive copy here, and javadoc that this is what happens.