Do not call Destroy directly from an application. Instead, call Free. Free verifies that the TPen reference is not nil, and only then calls Destroy.Destroy frees the resource identified by the Handle property. 

System::TObject::Free