It’s dangerous to give a non-const reference to an internal container that the API users are not supposed to modify.