...
Also, if the object construction or initialization depends on a security check within the constructor, the security check will be bypassed if an untrusted caller can obtain obtains the partially initialized instance (see OBJ04-J. Do not allow partially initialized objects to be accessed for more details).
...