Been musing lately that encapsulation is a lie, and came to the conclusion that the misunderstanding stems from confusing "encapsulation" with "ownership."
If I construct an object with some data, there is absolutely zero guarantee something else doesn't hold a reference to it, and therefore no guarantee the data won't be manipulated from the outside.
To achieve actual encapsulation, ownership of the data must be transferred so that only a single object has the authorization to manipulate it.