> the branding can still be broken via down-the-stream mutations

Only for mutable values! A branded string should be as immutable as they come, right?