What is an escaping reference, and what are the ways to prevent your internal mutable state from leaking to callers?

Returning a live reference to an internal collection/object lets callers mutate your class's private state directly. Fix with: returning an iterator, a defensive copy, an immutable wrapper, a deep copy, a read-only interface, or hiding the implementation behind a Java Module boundary.