All it takes is a single person having it cloned, who can call them out because the hash values would have changed. This isn't really a realistic threat.
That single person who cloned it could also backdate their hashes and claim things changed when they didn't.
Not with matching SHAs though, so someone dedicated to tracking changes would know.