BoxStoreBuilder: prevent modification of model after init. This is currently not really relevant as model is passed unchecked to the native side and not used for any other purpose. But it may be in the future, so rather be safe than sorry.