My understanding is that "the class restriction" isn't trying to implement any kind of security boundary — they just haven't managed to implement support yet.