Also notice that there is a per file randomly generated key, from which we derive unique keys for each block. The per file key is encrypted to the nsec for recovery.

This prevents linking multiple blocks to the same file/user.