Technically you're still correct even when you would advocate for both. Every additional copy increases the risk that the data is accessed by someone else.