That still means you'd have to show the user actually made a copy themselves - that's different than learning they possess one.