Address FindBugs warnings

Fine to leave as-is - was just a curiosity question. We're not mutating it, but it doesn't explicitly say that concurrent calls to `format` are thread-safe, so let's just stick with the change.