enforce MIOBufferAccessor accessor API

We already have sensibly-named accessors for the MIOBufferAccessor
members, so there's no need to access the internals directly. Make the members private and use the accessors wherever necessary. This exposes some places that don't use the proper APIs, so fix those too.