What are common mistakes developers make with ObjectInputStream/ObjectOutputStream?

import java.io.*;

// Sample class that implements Serializable
class Person implements Serializable {
    private static final long serialVersionUID = 1L;
    String name;
    int age;
    transient String password; // This field will not be serialized

    Person(String name, int age, String password) {
        this.name = name;
        this.age = age;
        this.password = password;
    }
}

public class SerializeDemo {
    public static void main(String[] args) {
        Person person = new Person("John Doe", 30, "secretPassword");

        // Serialization
        try (ObjectOutputStream out = new ObjectOutputStream(new FileOutputStream("person.ser"))) {
            out.writeObject(person);
        } catch (IOException e) {
            e.printStackTrace();
        }

        // Deserialization
        try (ObjectInputStream in = new ObjectInputStream(new FileInputStream("person.ser"))) {
            Person deserializedPerson = (Person) in.readObject();
            System.out.println("Deserialized Person: " + deserializedPerson.name + ", " + deserializedPerson.age);
            // Password will be null due to transient
            System.out.println("Password: " + deserializedPerson.password);
        } catch (IOException | ClassNotFoundException e) {
            e.printStackTrace();
        }