I should have mentioned: While the enclosed structure pointer is hidden, capsules cannot hide the mutability of their underlying structure. That much information leaks past the encapsulation boundary.