The private field anyone can modify

• A

  The field ought to have been declared final rather than merely being made private

• B

  The caller is at fault for calling clear on a list it does not own

• C

  The class should have used a plain array rather than a List here

• D

  The getter hands out the internal list itself, so private protects only the field