There is also the crucial issue of object composition - whether collections of objects can be treated as immutable in a "deep" or "shallow" sense. I discuss this at length in chapter 11 of my textbook "High-Assurance Design".