`get_mut` allows invalidating the invariant

Direct mutable access to the inner value means that it can be replaced with another value, which doesn't comply with the condition.