Can models actually stream the file in as they see fit, or is "read only enough" just an attention trick? I suspect the latter.