There might be other places i might be missing, but these are the obvious ones.
leftover entity handling i did not mark:
* everything that involves a apply()-like algorithm (e.g. callbacks) over the
same list of objects.
* in mcl_damage, it's not known whether mcl_damage.from_mt() would involve
entity handling or just player handling.