Use let for injected dependencies (which you don’t expect to mutate).

You’re then free to inject URLSessionProtocol safely.

Keep var only if you need to mutate inside the actor after initialization.