The problem with single-threaded shared mutability