Good catch. But the SHA hash is salted per backup destination though. So you can't figure out the content from the hash alone.

EDIT: I should make note of that on the docs page really. It currently gives the impression that I'm just straight up calculating the sha of the content.