“It is far easier to design a class to be thread-safe than to retrofit it for thread safety later.”