It's still an honor system. There's a way to generate code that will call the "private" or "protected" data/function even if it violates what's specified in the headers.

That shouldn't prevent the subversion of data members or inline functions, or the ability to add your own member functions to the class.