Why would track() needing to be theadsafe change in the future? People should always be able to call this function from anywhere they want and it should work.

I'd prefer a shorter comment like, // Must be threadsafe, since this can be called from anywhere.