It is fairly defensive. I also find the ARC spec fairly ambiguous about whether it _must_ hold a strong reference to a message receiver. It clearly states that it must be strong until the read, but becomes much less clear after that.