Make concrete classes final by default

Martin is proposing sealed instead: PRE-SIP: Make classes `sealed` by default.