NonOwning pointer for members is safe