[lmm]

> With reflection, you can mess around with private variables from outside the classes.

Worth mentioning that you can disallow reflection via the security manager, at least in earlier versions of the JVM.