We only lock the surface in Renderer::doRender(), but we also rely on the surface to be valid in RenderViewInitializerJob, where we end up calling RenderSurfaceSelector::renderTargetSize() with a surface that may have been destroyed before we get there (this typically happens at shutdown).

Should we try to lock the surface until all jobs are finished running or can we somehow collect the necessary information before the jobs are run?