Whenever gnucleus resumes a file it rolls back 4096 bytes to make sure the new file is the same as the one you already have.

Someone would have to guess all 4096 bytes correctly to give you a different file. Its like a very long key.

When segmented downloading is implemented, rollbacks will be used to ensure all the pieces match up exactly.