2 messages producing the same digest. That’s actually a really interesting question.

I think he means a set-theoretical collision, not a feasible collision attack. I.e. "is SHA256 a bijection on 256-bit integers?"