 
                            ...
One noteworthy exception to this guideline pertains to classes that implement the
java.lang.Cloneableinterface. In these cases, the accessibility of theObject.clonemethod should be increased fromprotectedtopublic.
Risk Assessment
Subclassing allows access restrictions to be weakened, possibly compromising the security of a Java application.
...