ohhhh that's brutal haha! for context my app runs entirely clientside, but I get it, it's an interesting idea...
If you are to hand out files maybe it is wonderful to write them a letter that serves as their shard? They might actually store it some place safe and it wouldn't scream I'M A SECRET!