Understanding access restriction of variant parametric types and Java wildcards