An attacker may be able to control the way it happens.
It may be repeatable to always remove the first or the last. If it's online dedup, it'll always be the last.
Or the attacker can provide many copies of the document you want to still have a copy of, and one copy in the middle of the one that should be vanished.
