Finally managed to ask Sven about this and as it turns out, my worries were not justified: The object is re-created per request, so the described issue would never arise.
