One is much easier to inspect and verify than the other. There's really no way to check if someone has made a copy of data if you've given them that data. It'

One is much easier to inspect and verify than the other. There's really no way to check if someone has made a copy of data if you've given them that data. It's not that hard to check if an application prompts a user for an email address.