Why does mutating a managed entity's field get persisted even without calling save() or update()?

Hibernate's dirty checking compares a managed entity's current field values against a snapshot taken when it was loaded, at flush time. If any field differs, Hibernate generates an UPDATE for it automatically — the entity is already tracked ('managed') by the persistence context, so no explicit save call is needed to trigger persistence.