I think those counterfactuals can be the most useful explanation, while not being the direct cause.

"why did the disk fill up" would be most directly explained by the most recent write. That's not useful though. It doesn't really matter what the last write was.