Seems to me you could send objects as messages, that only allow reading their state, not setting.