dictionary() returns object immune to __proto__ foolery