Looking at this some more, I think there are a number of things going on here.

First, Session#get seems to be missing the same checking since the move to LoadPlan-based loading.

Second, I wonder if there should be some handling for the "wrong class" case in the load listener in the branch where we pull from second-level cache (and possibly from database) like there is when we pull from the session-cache.