Seems the method will rely on sharing file hashes. Should work in most cases but hashes would not be that difficult for a bad actor to change with some basic knowledge (I.e. terrorist uploader)