Appears I was too quick to celebrate.

To verify that the error was being caused by nested objects I changed the model to use a UUID field.
When I retested to verify, I didn't run mvn clean and that meant my tests ran against the cached generated classes.

So this does appear to be a legit bug. I've checked and no interfaces are being used as fields/return types.