Why are public static final array a security hole?

Question

Effective java says:

// Potential security hole!

static public final Thing[] VALUES = { ... };

Can somebody tell me what is t

Answer 1

In this declaration, a client can modify Thing[0], Thing[1], etc (i.e. elements in the array).