Correct. An object can be mutated only by a function existing in the same module where the object was created. However, simply having getters and setters within the same module is not enough to fully protect the object's state. You must also implement mechanisms to restrict access to these functions. One common approach is using an AdminCap pattern, which involves creating a capability-based access control system. This ensures that only authorized entities can invoke certain functions, thereby preventing unauthorized manipulation of the object's state. Check out the AdminCap pattern for more information.