Pin protects the pointee, not the pointer handle
An address-sensitive value must remain at one memory address from the moment its invariant is established until drop. `Pin<Box<T>>` can itself be returned, stored in a Vec or moved between variables; those operations move the Box handle while its heap allocation stays put.